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Your  potential.  Our  passion. 

Microsoft 


fighting  ancient  warriors,  easy. 


\  ■  y&jJ* 


_  ■  '' 


.  r\*f*  i./v 

k;  \  •  '  ;  “  . 


1.  Alert  the  mail  room. 

Tell  them  to  refuse  delivery  of  huge,  crudely  built  wooden  horses. 
If  one  slips  through,  simply  return  to  sender. 
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2.  Mop  'em. 

A  dirty  mop — the  dirtier  the  better — thrust  face-ward  is 
really  gross.  Who  knows  where  that  mop's  been? 
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3.  Use  what's  at  hand. 

A  garbage  can,  dumped  over  the  head  of  a  Warrior,  will  disable 
him  to  painful  and  hilarious  effect. 
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4.  Unleash  the  Trojan  teddy  bear.  {Y4 

Fight  their  giant  phony  gift  filled  with  Warriors  with  (j  ffcj 
one  of  your  own.  Finding  Warriors  is  tough,  but  ’ 
not  impossible.  |  ! 
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5.  Summon  the  power  of  Olympus. 

Ancient  Warriors  are  not  going  to  mess  with  the  power  of  Zeus. 
Use  this  (and  a  fake  beard)  to  your  advantage. 


6.  The  burrito  grande  of  death. 

Eating  a  big  lunch  makes  most  people  useless  and  sleepy  in  the  after¬ 
noon,  and  Ancient  Warriors  are  no  different.  Order  the  nachos,  too. 


1.  Implement  Microsoft"  Forefront. 


Forefront  makes  defending  your  systems  easier.  It's  a  comprehensive,  simple- 
to-use,  integrated  family  of  products  that  helps  provide  protection  across  your 
client,  server,  and  network  edge.  For  case  studies,  free  trials,  demos,  and  all 
the  latest  moves,  visit  easyeasier.com 

Forefront  is  business  security  software  for  client,  server,  and  the  network  edge. 
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■  NEWS  DIGEST 

8  Sources  say  Microsoft  plans 
to  announce  a  yearlong  trial 
program  that  will  let  hosting  firms 
stream  Office  to  their  customers’ 
PCs.  |  Microsoft  launches  its  first 
hosted  CRM  offering  in  an  effort  to 
compete  with  Salesforce.com. 


10  A  stalled  wireless  network  in 

Portland,  Ore.,  is  further  proof  that 
the  original  business  model  for 
municipal  Wi-Fi  isn’t 
viable.  |  IBM  unveils 

rack-mount  servers 

built  to  runWeb2.0apps. 


11  Developers  want  to 
install  a  pair  of  wind 
turbines  to  help  power 
a  data  center  in 

Fall  River,  Mass. 


■  NEWS  ANALYSIS 

12  Some  Suppliers  Gain  From 
Failed  Wal-Mart  RFID  Edict. 

Wal-Mart  has  abandoned  its  RFID 
mandate,  but  several  companies 
credit  the  program  with  helping  them 
to  deploy  the  tracking  technology. 

14  Paying  Breach  Bill  May  Not 
Buy  Hannaford  Full  Data  Protec¬ 
tion.  The  grocer  is  spending  millions 
on  IT  security  upgrades.  But  even  the 
new  systems  might  not  have  been 
able  to  stop  the  recent  data  theft  there. 

m  OPINION 

6  Editor’s  Note:  Don  Tennant 
reports  on  the  reaction  to  the 
Computerwortd.com  debut  of  his 
alter  ego,  advice  maven  Aunt  Donna. 
One  word  sums  it  up:  “Wow." 

33  Robert  L.  Mitchell  learns 
firsthand  that  in  a  hospital  emer¬ 
gency  room,  lack  of  access  to  patient 
data  could  be  a  real  killer. 

40  Frankly  Speaking:  Frank 
Hayes  contends  that  while  agile 
programming  may  sound  warm  and 
fuzzy,  it’s  really  a  pragmatic  approach 
to  writing  code. 
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16  On  the  Mark:  Mark  Hall 

hears  from  two  defenders  of  Cobol. 


35  Career  Watch:  Learn  about 
an  organization  that  helps  profes¬ 
sionals  who  are  disabled  embark  on 
IT  careers. 

39  Shark  Tank: 
that  some  users  do 
IT’s  instructions  - 
maybe  too  literally. 
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17  The  Grill:  David  Rice,  author 
of  Geekonomics,  talks  about  rating 
software,  putting  a  value  on  vulner¬ 
abilities  and  charging  vendors  for 
security  bugs. 


32  Security  Manager’s 
Journal:  When  Taking  Time 
Off  Is  No  Vacation.  ForC.J.  Kelly, 
family  obligations  run  up  against  a 
demanding  work  schedule.  Does 
anyone  have  advice  on  working 
remotely? 
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20  IT’s  Top  Five 
Training  Mistakes 

COVER  STORY:  Let’s  face  it:  Users  aren’t  always  to  blame 
for  training  debacles.  Learn  how  to  mend  your  ways. 


24  Goodwill 
Mission 

COMPUTERWORLD 
HONORS:  Teleconferenc¬ 
ing  paired  with  medical 
diagnostic  equipment 
helps  Medical  Missions  for 
Children  save  young  lives 
worldwide. 
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28  Coast-to-Coast 
Collaboration 

With  its  Virtual  Studio,  DreamWorks  enables  animators 
and  actors  to  work  together  virtually  across  the  country. 

4 

30  A  Telco  Giant  Gets  Agile 

Moving  from  traditional  waterfall  development  techniques 
to  an  agile  approach  isn’t  easy,  especially  for  a  huge  tele¬ 
communications  company.  Read  how  BT  Group  worked 
through  the  issues  and  came  out  ahead. 
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DON’T  MISS  THIS  BIG 

OPPORTUNITY 


From  the  BlackBerry  wireless  revolution  to  groundbreaking 
stem  cell  research,  innovation  and  imagination  are  the 
cornerstones  of  Ontario’s  diverse  and  growing  economy. 

Ontario  is  introducing  an  exciting  new  initiative  to  help 
ensure  the  continued  growth  of  the  industries  that  will 
shape  our  future. 

The  Ontario  Next  Generation  Of  Jobs  Fund  is  a  five-year 
$1.15  billion  strategy  designed  to  assist  innovative  and 
environmentally  proactive  companies  working  in  fields  as 
diverse  as  biotechnology,  sustainable  energy,  digital  media 
and  health  sciences. 

For  companies  prepared  to  advance  a  project  over  $25 
million  or  create  and/or  retain  100  high  value  jobs  within 
five  years  for  Ontarians,  the  Next  Generation  Of  Jobs  Fund 
represents  a  unique  opportunity  to  develop  new  products 
and  new  markets.  Companies  are  guaranteed  a  decision 
within  45  days  of  submitting  a  complete  proposal. 

Applications  for  the  Next  Generation  Of  Jobs  Fund  are 
being  accepted  now.  For  more  information  on  the 
application  process  and  eligibility,  please  visit  us  at 
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IN  THE  WORLD  OF  ENTERPRISE  INTEGRATION 

I  need  a  solution  that  runs  like  clockwork  or  I  run  the  risk  of  running  a  lot  of  stairs. 


EDITOR’S  NOTE 


Don  Lennart 


e  Back  Story 


AST  WEEK’S  launch  of  the  “Dear  Aunt  Donna”  vid¬ 
eo  series,  in  which  our  feisty  resident  agony  aunt  (my 
alter  ego)  did  her  shtick  on  our  Web  site  and  You¬ 
Tube,  got  the  reaction  we  fully  expected  it  would.  If 
one  word  could  capture  the  thrust  of  that  reaction,  it  would 
have  to  be  “wow” 


Of  course,  “wow” 

!  can  mean  a  lot  of  differ- 
!  ent  things.  In  this  case, 

]  it  seemed  to  translate 

*  to  something  like,  “It’s 

1  funny,  but  whoa.  Where 
|  in  the  world  did  this  come 
\  from?  And  how  on  earth 
\  did  you  get  the  CEO  of 
i  Novell  and  these  other 

*  people  to  play  along  by 

|  asking  for  advice  in  these 
|  video  clips?” 

The  answer  to  the 
!  latter  question  is  fairly 
jj  simple.  It  turns  out  that 
many  in  the  IT  commu- 
J  nity  —  even  corporate 
!  hotshots  —  have  a  better 
sense  of  humor  than  we 
often  give  them  credit  for. 
The  answer  to  the  former 
question  is  a  little  more 
j  involved. 

“Aunt  Donna”  is  a  char¬ 
acter  I  created  in  the  mid- 
;  ’90s  when  I  was  editor  in 

chief  of  the  Hong  Kong 
edition  of  Computerworld. 

I  used  the  character  as  a 
vehicle  to  address  random 
current  IT  events  in  my 
weekly  column.  I  would 
make  up  a  question  that 
was  supposedly  written 
by  a  real  person  (I  ran  a 
disclaimer  making  it  clear 
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that  it  was  all  fiction),  and 
then  Aunt  Donna  would 
offer  her  sage,  typically 
sarcastic,  advice. 

For  example,  in  1997, 
when  Oracle  CEO  Larry 
Ellison  was  trying  his  best 
to  make  a  go  of  his  Net¬ 
work  Computer  initiative 
and  having  some  bad  luck 
with  it,  we  used  Ellison’s 
penchant  for  all  things 
Japanese  to  poke  a  little 
fun  at  the  situation: 

Dear  Aunt  Donna, 

I’m  at  my  wit’s  end.  I’m  try¬ 
ing  my  best  to  prove  to  the 
world  that  network  com¬ 
puters  are  the  answer  to  all 
of  our  problems,  but  I  keep 
shooting  myself  in  the  foot. 
A  few  months  ago,  I  man¬ 
aged  to  fry  a  couple  ofNCs 
during  a  demo  in  Hong 
Kong,  and  just  last  week 
at  Oracle  Open  World  in 

B  Many  in  the  IT 
community  -  even 
corporate  hotshots 
-  have  a  better 
sense  of  humor 
than  we  often  give 
them  credit  for. 


Los  Angeles,  I  tried  an¬ 
other  demo  that  completely 
backfired.  Common  sense 
tells  me  to  give  up  and 
concentrate  on  software, 
but  my  samurai  philosophy 
tells  me  to  never  surrender. 
What  should  I  do? 

—  Trying  to  be  Japanese 

Dear  Trying, 

There’s  a  lot  more  to  being 
Japanese  than  decorating 
your  house  like  a  Kyoto 
tourist  trap  and  selling 
little  hardware  gadgets. 

You  need  to  stay  focused, 
dear.  Let  Scott  McNealy  do 
the  NC  thing.  He  doesn’t  go 
around  making  databases 
look  silly,  does  he? 

And  when  we  heard 
that  former  IBM  CEO  Lou 
Gerstner  had  pulled  IBM’s 
ads  from  Fortune  because 
he  didn’t  like  an  April  1997 
profile  piece  the  magazine 
ran,  we  let  our  readers 
know  about  it  with  an 
Aunt  Donna  offering  that 
made  a  less-than-subtle 
reference  to  the  fact  that 
Gerstner  was  still  taking 
some  flak  for  his  role  as 
the  former  CEO  of  R.J. 
Reynolds: 


Dear  Aunt  Donna, 

Fortune  magazine  recently 
published  an  article  that 
claimed  that  I  am  arrogant 
and  brusque.  I  hate  it  when 
people  call  me  that!  So  I 
showed  them!  I  pulled  all  of 
our  advertising  out  of  For¬ 
tune,  which  was  something 
like  $6  million  a  year. 

Now  I’m  afraid  I  will  be 
perceived  as  an  arrogant, 
brusque,  spiteful,  media- 
manipulating  ogre,  and  of 
course  I  am  none  of  those 
things.  What  should  I  do? 

—  Running  amok  j 
inArmonk  J 

i 

I 

Dear  Running, 

My,  we  certainly  stepped 
in  it  this  time,  didn’t  we? 
THINK  on  the  bright  side, 
dear.  You  could  be  running 
a  tobacco  company!  Then 
you’d  really  be  in  deep  doo- 
doo,  and  you’d  begetting 
a  lot  worse  press.  And  at 
least  your  hands  are  clean 
of  that  whole  mess,  right 
snookums? 

i 

I 

i 

Back  then,  of  course, 

Aunt  Donna  only  ex¬ 
isted  in  print.  But  now  that  5 
we’re  doing  video,  too, 
what  better  character  to 
bring  to  cinematographic 
life?  And  getting  high- 
profile  CEOs  to  really  take  \ 
part  is  even  more  fun  —  as  ’ 
you’ll  continue  to  see.  So 
stay  tuned.  ■ 

Don  Tennant  is  editorial 
director  of  Computerworld  ! 
and  InfoWorld.  Contact 
him  at  don_tennant@ 
computerworld.com,  and 
visit  his  blog  at  http:// 
blogs  .computer  world, 
com/tennant. 
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■  ONLINE  CHATTER 


RESPONSES  TO: 

What  Brain  Drain? 

April  21, 2008 

In  most  companies,  management 
consists  of  MBAs  and  their  spread¬ 
sheets,  all  focused  on  making  the 
next  quarter’s  numbers.  The  last 
thing  they  care  about  is  a  problem 
they  perceive  as  being  years  away, 
and  they  don’t  plan  to  be  working 
for  the  same  company  then  anyway. 

■  Submitted  by:  Anonymous 

The  statement  “It’s  mostly  a  young 
person’s  game”  is  misleading;  the 
younger  IT  folks  will  repeat  the 
mistakes  of  the  past.  And  don’t 
discount  the  value  of  the  old  fogies’ 
ability  to  learn  new  technologies 
—  they  can  (and  do),  and  they  can 
apply  experience  to  use  the  new 
technologies  more  effectively.  I  rely 
upon  my  more  mature  teammates 
to  point  me  in  the  right  direction. 

■  Submitted  by:  TestKing 

Companies  that  ignore  their  older 
workers  already  obtain  the  con¬ 
sequences  that  flow  from  boomer 
retirements.  You  would  be  amazed 
how  many  wheels  are  being  re¬ 
discovered.  Very  few  people  will 


accept  a  mentor,  and  how  many 
people  read  the  [stupid]  manual? 

From  the  perspective  of  the 
young,  the  wheel  is  NOT  the 
same  if  the  new  wheel  was  made 
in  Perl,  PHP  or  Ruby  on  Rails  and 
the  old  wheel  was  made  in  Cobol, 
Fortran  or  C.  This  is  a  tech-centric 
point  of  view,  of  course;  executives 
still  see  a  “wheel”  and  not  realize 
the  old  wheel  has  10  times  the  reli¬ 
ability  and  performance  of  the 
new  wheel. 

■  Submitted  by:  Michael 

I  have  always  had  a  problem  with 
the  Dept,  of  Labor  and  their  sta¬ 
tistics  on  age  and  workforce  de¬ 
mographics.  Since  when  is  55  the 
magic  dividing  line,  with  one  foot 
on  a  banana  peel  and  another  in 
the  grave?  The  demographics  need 
to  change  because  a  lot  of  people 
where  I  work  are  well  past  55  and 
just  hitting  their  stride  and  show  no 
intention  on  retiring  anytime  soon. 
Nobody  is  leaving,  not  even  the  old¬ 
est  boomers! 

■  Submitted  by:  Lewis 

JOIN  THE  CHATTER!  You,  too,  can 
comment  directly  on  our  stories, 

at  computerworld.com. 
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Removing  Hard  Drive 
Data  -  the  YouTube  Way 

Don’t  let  your  valuable  enterprise  information 
get  stolen  from  a  discarded  hard  drive.  And 
forget  “format  c:”  or  any  of  those  silly  soft¬ 
ware  programs  that  promise  to  remove  the 
data.  Get  physical  -  really  physical. 

The  Five  Quickest 
Returns  on  Your 
Green  Investment 

Companies  are  finding  ways  to 
ensure  that  their  technology 
investments  result  in  both  environ¬ 
mental  benefits  and  a  quick  ROI. 


Microsoft  Admits  It  Sent 
Office  Nag  to  WSUS  Servers 

Furious  admins  say  their  Office  installs  have 


been  falsely  fingered  as  fake  through  an 
antipiracy  software  initiative  originally 
intended  for  limited  distribution. 


Which  Religion 
Has  the  Best 
Cell  Phone? 

OPINION:  Now  you  can  get 
cell  phones  customized  with 
specific  to  your  religion.  Columnist 
Mike  Elgan  picks  the  three  best  devices. 


Five  Easy  Ways  to 
Commit  Career  Suicide 

Putting  down  co-workers  or 
burning  bridges  when  you 
resign  are  surefire  ways  to 
darken  your  career  prospects. 
Here’s  how  to  avoid  critical 
mistakes. 
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THE  WEEK  AHEAD 

TUESDAY:  Main  conference  proceedings  and  the  trade  show 
floor  open  at  Interop  Las  Vegas  2008. 

WEDNESDAY:  IBM’s  Business  Partner  Leadership  Confer¬ 
ence  starts  in  Los  Angeles.  The  agenda  includes  speeches 
by  IBM  CEO  Sam  Palmisano  and  Google  CEO  Eric  Schmidt. 

THURSDAY:  Microsoft  begins  the  spring  edition  of  its  Blue- 
Hat  security  briefings,  a  two-day  internal  event  featuring 
presentations  by  outside  security  researchers. 


DESKTOP  APPLICATIONS 


Microsoft  to  Embrace 
Streaming  of  Office  to 
PCs,  Sources  Say 


Sources  said  last 

week  that  Microsoft 
Corp.  is  arming  a 
key  cohort  of  its  le¬ 
gion  of  business  partners  to 
help  it  fight  the  threat  posed 
to  Office  by  less-expensive 
or  free  online  alternatives, 
such  as  Google  Apps. 

According  to  the  sources, 
Microsoft  plans  to  conduct 
a  yearlong  test  that  will  en¬ 
able  Web  hosting  firms  to 
use  application-streaming 
systems  to  deliver  Office 
2007  to  their  customers. 

The  software  vendor  is 
expected  to  announce  the 
test  program  and  a  modified 


licensing  agreement  at  this 
week’s  Microsoft  Manage¬ 
ment  Summit  2008  in  Las 
Vegas. 

Starting  in  June,  the 
sources  said,  service  provid¬ 
ers  that  pass  a  face-to-face 
interview  with  Microsoft 
representatives  will  be  able 
to  stream  the  Standard  and 
Professional  Plus  editions  of 
Office  to  end-user  PCs. 

A  spokeswoman  for  the 
software  vendor  declined  to 
comment.  Microsoft  already 
allows  corporate  users 
with  Software  Assurance 
maintenance  contracts  to 
stream  Office  and  other  ap¬ 


plications  internally,  using 
its  SoftGrid  technology.  But 
this  would  be  the  first  time 
that  it  lets  service  providers 
using  third-party  streaming 
software  do  the  same. 

That’s  a  big  change  for 
Microsoft,  said  Neil  Gard¬ 
ner,  a  marketing  vice  presi¬ 
dent  at  application  stream¬ 
ing  vendor  Endeavors 
echnologies  Ltd.  Microsoft 
“has  been  sensitive  to 
whether  it  would  cannibal¬ 
ize  its  own  application  busi¬ 
ness,”  Gardner  said.  “They 
were  also  sensitive  to  the 
piracy  side  of  it  —  of  losing 
control  over  distribution.” 

Office  would  be  stored 
on  the  PCs  it’s  streamed  to 
and  would  maintain  per¬ 
sistence  after  users  log  off. 
That  “preserves  the  value 
of  desktop  apps  and  the  fat 
desktop  PC,  which  is  very 
important  to  Microsoft,” 
said  Paul  DeGroot,  an  ana¬ 
lyst  at  Directions  on  Micro¬ 
soft  in  Kirkland,  Wash. 

But  some  hosting  pro¬ 
viders  said  that  based  on 
Microsoft’s  tentative  pric¬ 
ing,  they  wouldn’t  be  able  to 
offer  Office  Standard  for  less 
than  $20  per  user  monthly 
—  nearly  five  times  higher 
than  the  technical  support 
tab  for  Google  Apps,  which 
costs  $50  per  user  annually. 

“Microsoft  can’t  be  com¬ 
placent,”  DeGroot  said. 
“They’ve  got  to  be  willing  to 
be  aggressive  on  price.” 

—  Eric  Lai 


1  SOFTWARE 

!  Hosted  CRM 

•  Service  Targets 
i  Salesforce.com 

I 

I  Microsoft  Corp.  last  week 
launched  its  long-expected 
<  hosted  CRM  service. 

i 

Microsoft  said  the  hosted 
'  marketing  and  sales  service, 
!  called  Dynamics  CRM  On¬ 
line,  marks  the  start  of  an 
j  aggressive  push  to  take  on 
!  hosted  CRM  pioneer  Sales- 
’  force.com  Inc. 

The  Professional  Plus 
I  edition  for  corporate  use  is 

•  priced  at  $59  per  user  per 
?  month.  It  includes  20GB 

J  of  storage,  offline  data 
!  synchronization,  200  con¬ 
figurable  workflows  and  200 

5  custom  entities.  The  low-end 

? 

;  Professional  edition  costs 
j  $44  per  user  per  month. 

!  The  service  is  available  now. 

Sheryl  Kingstone,  an 
«  analyst  at  Yankee  Group  Re- 
;  search  Inc.,  said  Microsoft 
|  must  still  work  out  “execu- 
!  tion  issues”  and  integrate  its 
>  communications  technology 
«  into  the  hosted  systems. 

-  BRIAN  FONSECA 

MThe  mar¬ 
ket  is  go¬ 
ing  on-demand 
and  into  cloud 
computing. 

SHERYL  KINGSTONE, 

ANALYST,  YANKEE  GROUP 
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Running  Linux,  Solaris, 
or  Windows?  Our 
servers  are  0%  faster, 
and  50%  smaller. 


Sun  Fire  X4450 


inside 


Powerful 

Efficient. 


Sun  Fire  X4150 


iTM 


Amazing  things  began  to  happen  when  Intel®  and  Sun®  started  working  together.  Intel’s  endorsement 
of  Sun’s  Solaris®  OS  for  the  Intel  platform  created  new  choices  for  customers,  with  breathtaking 
performance.  Simultaneously,  after  Sun’s  legendary  server  teams  got  ahold  of  the  Quad-Core 
Intel®  Xeon®  processor  7300,  they  built  the  Sun  Fire  X4450  -  the  world’s  highest  density  4-socket 
x86  rack  mount  server. 


So  whether  you’re  running  Linux®,  Solaris,  or  Windows®  -  on  VMware®  or  Sun’s  newest  xVM 
virtualization  platform,  we’ve  got  you  covered. 

Apply  for  a  free  6o-day  trial  of  the  Sun  Fire  X4450  at  sun.com/tryintelservers. 

.  •  ■  ■  ■  .  ■;  ''  1  ■?  :  v  ;  ’  ■'  '  '  " ;  ■  l 

Call  your  local  Sun  Sales  Representative,  Sun  Authorized  Partner  or  (888)  516-9362. 
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■  NEWS  DIGEST 


Municipal  Wi-Fi  Model 
Still  Not  Lighting  Up 


MOBILE  &  WIRELESS 


Announced  with 
fanfare  in  2006,  a 
municipal  Wi-Fi 
project  in  Portland,  Ore., 
has  been  stuck  in  a  par¬ 
tially  completed  state  since 
last  September  because  the 
vendor  building  the  net¬ 
work  no  longer  views  it  as 
economically  viable. 

Meanwhile,  the  city 
councils  of  Corpus  Christi, 
Texas,  and  Milpitas,  Calif., 
voted  this  month  to  take 
over  local  wireless  net¬ 
works  owned  by  EarthLink 
Inc.,  which  is  pulling  out  of 
the  municipal  Wi-Fi  market. 

The  experiences  of  those 
three  cities  provide  more 


evidence  that  the  business 
model  of  using  ads  and  sub¬ 
scription  revenues  to  fund 
and  then  make  money  from 
Wi-Fi  networks  isn’t  work¬ 
ing  out  for  wireless  vendors. 

Logan  Kleier,  informa¬ 
tion  security  manager  for 
the  government  of  Port¬ 
land,  said  last  week  that 
only  about  20%  of  the  city’s 
planned  Wi-Fi  network  is 
in  place  and  that  there  are 
no  imminent  plans  to  com¬ 
plete  it. 

Developer  MetroFi  Inc. 
halted  work  on  the  network 
last  fall  after  telling  city 
officials  that  it  had  been  un¬ 
able  to  bring  in  the  amount 


of  revenue  it  had  projected 
from  online  advertising 
sales  and  Wi-Fi  access  con¬ 
tracts  with  local  businesses. 

“MetroFi  said  that  they 
want  the  city  to  pay  for  it,” 
Kleier  said.  But  that  option 
wasn’t  acceptable  to  Port¬ 
land  officials,  leaving  the 
project  dead  in  the  water. 

The  network  originally 
was  scheduled  to  be  com¬ 
pleted  by  this  August,  with 
95%  coverage  of  indoor  and 
outdoor  spaces  citywide. 

But  MetroFi  CEO  Chuck 
Haas  said  it  has  become 
clear  that  municipal  net¬ 
works  need  multiple  rev¬ 
enue  streams.  He  added 
that  MetroFi  proposed  an 
expansion  of  the  Portland 
Wi-Fi  network  to  include 
paid  wireless  services  for 
police,  fire  and  other  mu¬ 
nicipal  departments,  plus 
surveillance  cameras  and 
traffic  control  technologies. 
Haas  said  he  thinks  the 
city  will  get  there  at  some 
point,  “but  just  not  on  the 
timeline  we  need  to  com¬ 
plete  the  network.” 

The  finished  portion 
serves  about  15,000  users 
per  month  and  supports  it¬ 
self  through  online  ads  and 
related  revenue,  Haas  said. 

—  Todd  R.  Weiss,  with  Stephen 
Lawson  of  the  IDG  News  Service 


Short 

Takes 

Dell  Inc.  said  that  it 
plans  to  shut  down  its 
Ottawa  customer  service 
center  as  part  of  its  effort 
to  cut  $3  billion  in  costs 
over  the  next  three  years. 
About  1,100  employees 
will  be  laid  off. 

Sun  Microsystems  Inc. 

has  confirmed  that  it 
acquired  microprocessor 
start-up  Montalvo  Systems 

for  an  undisclosed  sum. 
Sun  said  it  plans  to  use  the 
Santa  Clara,  Calif.-based 
company’s  low-power 
chip  technology  in  future 
Sun  processors. 

After  battling  start-up 
woes,  Psystar  Corp. 

said  it  is  now  shipping 
its  clones  of  Macintosh 
personal  computers.  The 
company’s  challenges 
included  a  blackout  of  its 
Web  store,  the  loss  of  a 
credit  card  processor,  and 
criticism  from  bloggers. 

Microsoft  Corp.  dis¬ 
closed  late  last  week  that 
it  has  sold  140  million 
licenses  of  Windows  Vista 
since  the  November  2006 
launch  of  the  troubled 
operating  system.  The 
company  did  not  break  out 
the  number  of  corporate 
licenses. 


IBM  Builds  Server  to  Run 
Web  2.0-Heavy  Sites 


IBM  last  week  unveiled  a  new 
type  of  rack-mounted  server  for 
companies  running  heavily  traf¬ 
ficked  Web  2.0  sites. 

The  server,  called  iDataPlex, 
is  designed  to  compete  with  un¬ 
branded  “white-box”  PCs  that 
online  firms  link  by  the  thou¬ 
sands  to  run  busy  Web  sites. 

IBM  said  that  through  a  new 
cooling  process,  the  system 


consumes  40%  less  power 
than  typical  models. 

Gregg  McKnight,  chief  tech¬ 
nology  officer  of  IBM’s  modular 
systems  group,  noted  that  the 
new  rack  servers  are  15  in.  deep, 
compared  with  about  25  in.  for 
a  typical  system,  which  “allows 
us  to  run  fans  at  a  much  lower 
velocity,  [saving]  about  67%  on 
fan  energy  alone.” 


In  addition,  an  optional 
water-cooling  system 
can  remove  all  the  heat 
generated  by  the  serv¬ 
ers  and  blow  cold  air 
into  the  data  center, 
said  Jim  Gargan,  vice 
president  and  business 
line  executive  in  IBM’s 
System  x  unit. 

A  fully  loaded  system  -  84 
iDataPlex  servers  with  network¬ 
ing  and  other  components  - 
costs  about  $150,000,  IBM 
said.  It  will  be  available  in  June. 


1 

The  new  system 
will  compete  with  the 
homegrown  clusters 
of  x86  servers,  and 
with  products  from  Ve- 
rari  Systems  Inc.  and 
Rackable  Systems  Inc., 
said  independent  ana¬ 
lyst  Joe  Clabby.  “They 
proved  the  concept,”  he  said. 
“Now  the  500-pound  gorilla 
has  landed  on  their  doorstep.” 

-  PATRICK  THIBODEAU, 
WITH  JAMES  NICC0LAI 
OF  THE  IDG  NEWS  SERVICE 
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BETWEEN  THE  LINES 


DATA  CENTERS 


Data  Center  Firm  Looks 
To  Harness  Wind  Power 


'mmmKmm 


A  DEVELOPMENT  FIRM 
that  plans  to  build 
a  data  center  in  Fall 
River,  Mass.,  is  looking  to 
install  a  pair  of  large  wind 
turbines  —  potentially  as 
tall  as  25-story  buildings 
—  to  help  generate  the  elec¬ 
tricity  needed  at  the  facility. 

On  April  17,  local  devel¬ 
opers  Roland  Patenaude 
and  Karen  Charette  won 
approval  from  the  zoning 
board  in  Fall  River  to  set  up 
two  wind  turbines  as  tall  as 
300  feet. 

If  the  effort  to  build  the 
120,000-square-foot  data 
center  on  a  4.5-acre  parcel  of 
land  goes  ahead  as  planned, 
the  turbine  installation 
would  likely  be  one  of  the 
largest  of  its  kind  in  a  U.S. 
city  —  if  not  the  largest. 

Granite  Block  Global  Data 
Center  Inc.,  the  company 
formed  to  build  the  facility, 
will  offer  raised  floor  space 
to  commercial  customers  in 
Fall  River,  which  is  about  50 
miles  south  of  Boston. 

Patenaude,  who  hopes  to 
open  the  data  center  within 
two  years,  estimated  that  its 
monthly  electricity  bill  will 


«  General  Electric  2.5  MW  Series 
turbines  might  be  used  in  the  Fall 
River  data  center  development. 


be  more  than  $1  million.  The 
wind  turbines  could  reduce 
that  tab  by  20%  or  more,  he 
said,  adding  that  he  would 
install  as  many  as  eight  tur¬ 
bines  if  he  had  more  land. 

Tom  Gray,  a  spokesman 
for  the  American  Wind  En¬ 
ergy  Association  in  Wash¬ 
ington,  said  he  doesn’t  know 
of  any  data  centers  that  are 
using  turbines  now. 

Gray  said  wind  turbines 
make  a  “swishing”  sound, 
which  can  be  a  problem  if 
they’re  too  close  to  residenc¬ 
es.  But  he  added  that  for 
people  “who  live  1,000  feet 
away,  they’re  no  louder  than 
a  kitchen  refrigerator.” 

—  Patrick  Thibodeau 
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began 

delivering  Windows  Vista 
Service  Pack  1  to  users  who 
have  enabled  the  Automatic 
Update  feature  on  their  PCs. 


take  a  job  at  an  unidentified 
company  in  the  U.S, 


Two  weeks  after  Corel 
Corp.’s  majority  owner  of¬ 
fered  to  buy  the  rest  of  its 
shares,  Corel  said  that  CEO 
David  Dobson  is  resigning  to 


Presi¬ 
dent  Bush  described 
paper  medical  records  as 
“antiquated”  and  called  for 
widespread  adoption  of  elec¬ 
tronic  records  that  can  be 
transmitted  between  health 
care  providers  by  2014. 


EU  Parliament  OKs 
Satellite  Project 

BRUSSELS -The European 
Parliament  last  week  approved 
the  Galileo  satellite  navigation 
system,  clearing  the  way  for 
the  European  Union’s  most  am¬ 
bitious  technology  project. 

The  parliament’s  approval 
was  the  final  hurdle  for  the 
€3.4  billion  ($5.4  billion  U.S.) 
Galileo  system,  a  joint  develop¬ 
ment  effort  of  the  EU  and  the 
European  Space  Agency. 

Parliament  member  Etelka 
Barsi-Pataky  noted  that  the  ef¬ 
fort  marks  “the  first  infrastruc¬ 
ture  in  Europe  that  is  commonly 
built  and  jointly  owned.” 

In  a  statement,  the  parlia¬ 
ment  said  that  work  on  the 
system  will  start  this  year, 


once  contractors  are  selected. 

Galileo,  which  is  similar  to 
the  U.S.  government’s  Global 
Positioning  System,  is  due  to 
be  deployed  by  2013. 

Paul  Meller, 

IDG  News  Service 


Aussie  Utility,  CSC 
Ink  Services  Deal 


PERTH,  Australia -West¬ 
ern  Power,  an  electric  utility 
owned  by  the  Western  Austra¬ 
lian  government,  has  signed  a 
three-year  IT  services  contract 
valued  at  $15.4  million  Austra¬ 
lian  ($14.5  million  U.S.)  with 
Computer  Sciences  Corp. 

The  first  IT  outsourcing 
contract  awarded  by  Western 
Power,  the  deal  calls  for  Falls 
Church,  Va.-based  CSC  to 
migrate  the  utility’s  mainframe 
processing  to  its  Melbourne 
mainframe  center  and  provide 
support  services  to  the  util¬ 
ity.  Western  Power  CIO  Leigh 


Sprlyan  said  the  Perth-based 
utility  selected  CSC  in  part 
for  its  consumption-based 
pricing  model,  which  requires 
payment  only  for  mainframe 
capacity  used. 

Sandra  Rossi, 
Computerworld  Australia 


BRIEFLY  NOTED 

India’s  largest  outsourcer, 
Tata  Consultancy  Services 
Ltd.,  blamed  an  uncertain 
U.S.  economy  for  lower-than- 
anticipated  revenue  and  profit 
growth  in  its  fiscal  year  that 
ended  March  31.  Nonetheless, 
Tata  said  its  profits  rose  32% 
from  the  previous  year  to 
$1.25  billion  (U.S.)  as  sales 
rose  33%  to  $5.7  billion. 

John  Ribeiro, 

IDG  News 
Service 
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Some  Suppliers 
Gain  From  Failed 
Wal-Mart  RFID  Edict 


Daisy  Brand  and  TI  credit 
the  long-delayed  plan  for 
their  launch  of  successful 

programs.  By  Sharon  Gaudin 


IVE  YEARS  ago, 
when  Wal-Mart 
Stores  Inc.  issued  a 
startling  mandate 
that  its  suppliers  must  adopt 
radio  frequency  identifica¬ 
tion  technology,  Daisy  Brand 
Inc.  quickly  volunteered  to 
be  first  out  of  the  gate. 

Today,  the  family-owned 
dairy  products  supplier  is 
fully  compliant  with  those 
Wal-Mart  requirements,  tag¬ 
ging  every  pallet  that  leaves 
its  warehouses.  The  effort 


has  been  a  boon  to  Dallas- 
based  Daisy  Brand,  cutting 
in  half  the  time  it  takes  to 
load  its  delivery  trucks. 

But  Wal-Mart’s  mandate 
didn’t  work  out  so  well  —  or 
even  work  out  at  all  —  for 
most  of  its  other  suppli¬ 
ers.  The  retail  giant  says 
that  many  of  its  600  top 
suppliers,  which  account 
for  three-fourths  of  the 
company’s  sales  volume,  use 
RFID  technology  today  to 
“some  degree.”  Most  of  the 


rest  —  some  60,000  strong 

—  are  not  using  it  at  all. 
Once  the  implementation 

difficulties  for  its  suppliers 

—  and  for  Wal-Mart  itself 

—  became  clear,  the  retailer 
backed  away  from  the  RFID 
mandate,  which  remains  in 
limbo  today. 

For  many  of  the  small 
and  midsize  businesses 
that  make  a  good  chunk  of 
revenue  selling  products  to 
Wal-Mart  stores  around  the 
country,  the  long-term  ben¬ 
efits  of  RFID  are  still  not  top 
of  mind,  but  the  expense  is. 

While  analysts  bicker 
over  exactly  how  much  it 
costs  to  implement  RFID 
technology,  there’s  a  gen¬ 
eral  consensus  that  a  small 
supplier  would  have  to 


recently  announced  an  RFID  plan 
for  its  distribution  centers. 

spend  between  $15,000  and 
$20,000  just  for  the  tags, 
readers  and  middleware 
needed  to  get  started.  Add 
the  cost  of  planning,  train¬ 
ing  and  handling  all  the  new 
information  compiled  by 
RFID  systems,  and  the  price 
keeps  escalating. 

Such  a  significant  ex¬ 
pense,  especially  for  suppli¬ 
ers  that  may  still  be  strug¬ 
gling  to  get  bar  codes  in  the 
right  places,  is  a  lot  to  ask 
to  keep  just  one  customer 
happy  —  even  one  the  size 
of  Wal-Mart. 

“Without  the  clarity  of 
immediate  benefits,  the  ma¬ 
jority  of  suppliers  are  will¬ 
ing  to  risk  not  being  the  per¬ 
fect  trading  partner,”  said 
Roy  Wildeman,  an  analyst 
at  Forrester  Research  Inc. 

It  all  started  back  in  2003, 
when  Wal-Mart  first  an¬ 
nounced  that  its  suppliers 
would  have  to  tag  crates  and 
pallets.  At  the  time,  Wal- 
Mart  mandated  that  its  top 
100  suppliers  would  have  to 
complete  the  move  by  Janu¬ 
ary  2005. 

Bentonville,  Ark.-based 
Wal-Mart  was  the  first 
major  retailer  to  demand 
that  its  suppliers  use  RFID 
technology.  The  move 
meant  that  companies  were 
suddenly  confronted  with 
learning  the  new  technology 
—  and  paying  for  it. 

While  some  suppliers, 
like  Daisy  Brand,  quickly 
jumped  on  board,  most  were 
less  amenable  to  the  plan. 

Part  of  the  problem  was 
that  the  plan  was  unveiled 
before  the  RFID  industry 
was  ready  for  it,  users  and 
analysts  said.  There  were 
no  standards,  the  technolo¬ 
gy  was  in  its  infancy,  prices 
were  high,  and  fly-by-night 
vendors  and  consultants 
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littered  the  industry. 

“Gosh,  if  [someone]  could 
spell  ‘RFID,’  it  seemed  they 
thought  they  could  hang  out 
a  shingle,”  said  Tom  Shields, 
educational  technology  ser¬ 
vice  and  RFID  manager  at 
Texas  Instruments  Inc.  (TI), 
which  became  compliant 
with  Wal-Mart’s  require¬ 
ments  in  January  2006. 

He  noted  that  after  Wal- 
Mart  issued  the  RFID  man¬ 
date,  “there  were  [suppliers] 
hemorrhaging  money  to  be¬ 
come  compliant.”  Most  were 
shooting  in  the  dark,  trying 
to  implement  the  technology 
without  having  any  exam¬ 
ples  to  follow,  Shields  said. 

At  the  same  time,  Wal- 
Mart  needed  to  get  its  own 
RFID  house  in  order,  ac¬ 
cording  to  some  analysts. 

For  example,  the  company 
was  slow  to  install  RFID 
equipment  in  its  own  stores. 
John  Simley,  a  Wal-Mart 
spokesman,  said  that  at  least 
some  RFID  technology  is 
used  in  1,300  of  about  3,600 
U.S.  stores  today.  Most 
have  full  implementations, 
though  some  are  just  getting 
started,  he  noted. 

The  retailer  won’t  com¬ 
ment  on  whether  it  plans  to 
resume  the  program,  or  dis¬ 
cuss  a  schedule  for  install¬ 
ing  RFID  technology  in  the 
remaining  Wal-Mart  stores. 

John  Fontanella,  an  ana¬ 
lyst  at  AMR  Research  Inc., 
also  noted  that  Wal-Mart 
disbanded  an  internal  RFID 
program  office  in  the  months 
after  the  mandate,  transfer¬ 
ring  responsibility  for  the 
program  to  a  general  opera¬ 
tions  department.  Simley  de¬ 
clined  to  discuss  the  office. 

“I  think  they  were  very 
visionary  for  [seeing]  the  po¬ 
tential  for  RFID,  but  the  in¬ 
frastructure  to  support  that 
vision  was  still  being  built,” 
Shields  said.  “The  lack  of 
infrastructure,  the  cost  and 
all  the  troubles  created  the 


perfect  storm”  that  slowed 
RFID  adoption,  he  noted. 

Although  Wal-Mart’s  man¬ 
date  has  been  abandoned  at 
least  for  the  time  being,  it 
has  led  to  some  successful 
RFID  implementations. 

For  example,  TI  has  been 
tagging  pallets  and  cases  of 
goods  shipped  to  Wal-Mart 
for  two  years.  And  Shields 
said  the  company  is  ready, 
should  other  major  retailers, 
such  as  Target  Corp.,  move 
to  RFID. 

Shields  credited  TI’s 
patience  for  its  successful 
implementation  of  the  Wal- 


Mart  RFID  program. 

The  electronics  pro¬ 
vider  researched  options  for 
implementing  RFID  for  18 
months  before  spending  a 
single  dollar  on  equipment, 
he  said.  The  company  now 
tags  only  shipments  headed 
to  Wal-Mart,  thus  minimiz¬ 
ing  RFID  hardware  invest¬ 
ments. 

In  addition,  the  price  of 
RFID  equipment  dropped 
considerably  during  the 
evaluation,  further  reducing 
start-up  costs,  Shields  noted. 

Shields  also  said  that  TI 
created  an  RFID  study  team 
with  employees  from  IT, 
supply  chain  operations, 
field  sales  and  the  finance 
department,  letting  each 
part  of  the  organization  feel 
invested  in  the  project. 

“We  were  compliant  for 
under  half  a  million  dol¬ 
lars,”  said  Shields.  “We  were 
meeting  our  customer’s 
requirements.  That’s  what 
business  is.  You  can’t  always 
measure  it  as  ROI.  Part  of  it 
is  more  of  an  ROR  —  a  re¬ 


turn  on  relationship.” 

Meanwhile,  Daisy  Brand 
has  extended  the  RFID 
efforts  undertaken  for  Wal- 
Mart  into  other  parts  of  its 
business. 

Kevin  Brown,  director 
of  information  systems  at 
Daisy,  said  the  return-on- 
investment  criteria  weren’t 
based  meeting  a  single 
customer’s  requirements, 
but  on  how  the  technology 
addressed  the  supplier’s 
own  business  needs. 

“If  you  don’t  do  anything 
with  [RFID  for  yourself], 
the  payback  period  is  obvi¬ 


ously  going  to  be  longer,” 
Brown  added. 

Five  months  after  Daisy 
became  compliant  with 
Wal-Mart’s  edict,  an  entire 
inventory  management  sys¬ 
tem  based  on  pallet  tags  had 
been  implemented.  As  goods 
move  through  facilities, 
workers  don’t  have  to  take 
notes,  since  all  pallets  are 
tracked  by  RFID  readers. 

A  SECOND  CHANCE 

The  experiences  of  Daisy 
Brand  and  TI  could  provide 
helpful  lessons  to  small  and 
midsize  suppliers,  should 
Wal-Mart  revive  its  mandate. 

And  analysts  say  that  the 
recent  launch  of  an  RFID 
program  at  Wal-Mart  unit 
Sam’s  Club,  a  warehouse 
retail  chain,  could  signal  an 
imminent  resumption  of  the 
program. 

Wildeman  noted  that 
more  than  half  of  Sam’s 
Club’s  suppliers  are  also 
Wal-Mart  suppliers.  “If 
you’re  asking  a  large  por¬ 
tion  of  those  same  suppliers 


to  start  tagging  to  avoid  a 
penalty,  is  that  a  step  in  the 
overall  Wal-Mart  journey  to 
get  its  suppliers  to  be  com¬ 
pliant?”  he  asked. 

Sam’s  Club  announced 
its  plan  on  Jan.  7  and  or¬ 
dered  that  tags  be  attached 
to  all  pallets  shipped  to  its 
DeSoto,  Texas,  distribution 
facility  by  Feb.  1. 

Other  distribution  centers 
will  come  online  as  part  of 
a  graduated  rollout  over  the 
next  two  and  a  half  years. 

Simley  noted  that  un¬ 
tagged  pallets  that  arrive  at 
distribution  centers  after 
deadlines  will  be  tagged  by 
Wal-Mart  employees.  The 
suppliers  will  be  charged 
a  $2  fee  per  missing  tag, 
which  could  quickly  become 
a  major  expense. 

Meanwhile,  the  fully 
equipped  Wal-Mart  stores 
have  RFID  readers  installed 
in  receiving  bays  to  keep 
track  of  shipments  and  in 
so-called  transition  areas 
to  monitor  products  as 
they  move  from  the  stor¬ 
age  room  to  the  store  floor, 
where  workers  use  hand¬ 
held  readers. 

At  those  Wal-Mart  loca¬ 
tions,  the  program  seems 
to  be  working,  according 
to  a  report  released  last 
month  by  researchers  at  the 
University  of  Arkansas  in 
Fayetteville. 

The  study  of  16  Wal-Mart 
stores  last  year  showed  that 
RFID  technology  improved 
inventory  accuracy  by  13%, 
compared  with  stores  that 
lacked  the  technology.  The 
study  determined  that  the 
overall  savings  can  be  “mea¬ 
sured  in  millions  of  dollars.” 

“There  have  been  speed 
bumps  . . .  but  I  don’t  think 
for  a  second  that  Wal-Mart 
is  walking  away  from  their 
RFID  commitment,”  Fonta¬ 
nella  said.  “They’ll  slowly 
tighten  things  down  in 
terms  of  compliance.”  ® 


■|  don’t  do  anything  I 
IRFID  for  yourself], 

the  payback  period  is  obvi-  | 

ousfy  going  to  be  longer. 

imm  m0m  director  of  information' 
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■  SECURITY 


ment  in  checkout 
aisles  of  new  PIN 
entry  devices  with 
Triple  DES  encryption. 
Hannaford  also  said 
it  has  signed  IBM  to  do 
around-the-clock  net¬ 
work  monitoring,  and  the 
Scarborough,  Maine-based 
grocer  vowed  to  encrypt 
all  payment  card  data  on 
its  internal  network.  The 
goal,  Hannaford  CEO  Ron¬ 
ald  Hodge  said  during  a 
press  conference,  is  to  put 
“military-  and  industrial- 
strength”  security  controls 
on  the  company’s  systems. 

The  level  of  encryp¬ 
tion  that  Hannaford  has  in 
mind  isn’t  required  by  the 
PCI  rules,  which  specify 
that  card  data  needs  to  be 
encrypted  only  if  it’s  being 
transmitted  across  open 
public  networks. 

Despite  the  lack  of  more- 
stringent  requirements, 
encrypting  card  numbers  on 
point-of-sale  devices  is  “the 
most  significant  action”  that 
retailers  can  take  to  stop 
attacks  such  as  the  one  that 
hit  Hannaford,  said  Gartner 
Inc.  analyst  Avivah  Litan. 

But  that  doesn’t  necessar¬ 
ily  mean  that  the  new  se¬ 
curity  measures  will  make 
Hannaford  —  or  other  com¬ 
panies  that  follow  its  lead 
—  immune  to  future  attacks. 

Jim  Huguelet,  an  inde¬ 
pendent  PCI  consultant  in 
Bolingbrook,  Ill.,  praised 
some  of  the  steps  Hannaford 
is  taking,  including  an  ear¬ 
lier  decision  to  replace  all 
of  the  company’s  store  serv¬ 
ers.  As  part  of  the  breach, 
malware  was  placed  on  the 
systems  and  then  used  to 
intercept  the  payment  card 
numbers. 

Huguelet  said  that  the 
planned  end-to-end  encryp¬ 
tion  of  card  data  also  sounds 
good  —  on  paper.  But  to 
make  the  data  hacker-proof, 
he  added,  it  would  have  to 


The  grocer  is  spending  millions 
of  dollars  on  new  IT  security  tools. 
But  they  might  not  have  prevented 
the  theft  of  payment  data  from  its 
systems.  By  Jaikumar  Vqayan 


Hannaford  bros. 
Co.  said  last  week 
that  it  expects  to 
spend  “millions” 
of  dollars  on  IT  security 
upgrades  in  response  to  the 
recent  theft  of  up  to  4.2  mil¬ 
lion  credit  and  debit  card 
numbers  from  its  systems. 

Some  of  the  new  mea¬ 
sures  that  the  grocer  out¬ 
lined  go  beyond  the  controls 


mandated  by  the  Payment 
Card  Industry  Data  Security 
Standard,  or  PCI.  But  it  isn’t 
clear  whether  they  actually 
will  address  the  issues  that 
led  to  the  data  breach. 

The  planned  upgrades 
include  the  installation  of 
intrusion-prevention  sys¬ 
tems  on  Hannaford’s  corpo¬ 
rate  network  and  the  systems 
at  its  stores,  plus  the  deploy¬ 


Paying  Breach 
Bill  May  Not  Buy 
Hannaford  Full 
Data  Protection 


be  encrypted  from  the  PIN 
entry  devices  in  stores  to 
the  systems  of  the  payment¬ 
processing  firm  that  autho¬ 
rizes  card  transactions. 

And  because  almost  no 
payment  processors  accept 
encrypted  data  at  this  point, 
Hannaford  would  likely 
need  to  convince  the  firm 
it  works  with  to  make  sys¬ 
tem  changes  as  well.  “It’s  a 
tricky  thing,”  Huguelet  said. 

Similarly,  Hannaford’s 
decision  to  replace  all  of  its 
existing  PIN  entry  devices 
puts  it  ahead  of  the  curve  in 
meeting  a  PCI  mandate  that 
companies  must  start  using 
models  with  built-in  support 
for  Triple  DES  by  July  2010. 

But  in  most  cases,  the 
Triple  DES  technology 
encrypts  only  a  customer’s 
PIN,  according  to  Huguelet. 
So  even  if  Hannaford  was 
already  using  such  devices, 
it’s  unlikely  that  they  would 
have  prevented  the  card 
numbers  from  being  com¬ 
promised,  he  said. 

Litan  views  Hannaford’s 
plan  to  bolster  its  network 
defenses  via  the  use  of 
intrusion-prevention  sys¬ 
tems  as  another  step  in  the 
right  direction.  But  she  said 
there  are  indications  that 
the  breach  may  have  been 
the  handiwork  of  a  rogue 
insider  —  in  which  case  the 
intrusion-prevention  tools 
probably  wouldn’t  have 
helped  stop  the  attack. 

Hannaford  has  said  it 
was  compliant  with  the 
PCI  rules  when  the  breach 
took  place  between  Dec.  7 
and  March  10.  But  CIO  Bill 
Homa  said  last  week  that 
the  upgrades  are  aimed  at 
strengthening  the  grocer’s 
“deterrence,  prevention  and 
detection”  capabilities. 

The  unanswered  ques¬ 
tion,  though,  is  whether 
that  will  put  up  a  wall 
strong  enough  to  keep 
future  attackers  out.  ■ 
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Exstream's  Dialogue™  enterprise  document  automation  software,  combined  with 
Hewlett-Packard's  integrated  technology  for  document  and  records  management, 
information  archiving,  and  retention  provides  a  synergistic  enterprise  solution  for 
today's  CIO.  Together,  these  technologies  give  you  the  ability  to  create  more 
effective  customer  communications  while  meeting  compliance  and  e-discovery 
requirements.  Contact  us  today  to  learn  how  you  can  experience  the  synergy  by 
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example,  rushed  developers  would 
shorten  “Patient”  and  “Medicare”  to 
“Pat”  and  “Med”  for  fields  in  a  Cobol 
program,  making  it  difficult  for  any¬ 
one  else  to  know  what  was  meant. 

Sitner  doubts  those  business  ana¬ 
lysts  Marble  refers  to  will  have  an 
easy  time  decoding  hasty  abbrevia¬ 
tions.  He’s  on  a  one-man  mission  to 
fix  what  he  calls  “broken  Cobol.”  You 
can  call  him  at  (212)  254-3358.  Maybe 
he  can  help  your  organization  speak 
Cobol  more  fluently. 


Eyeball  Web  Apps 
Without  Spying 

Hon  Wong  poses  an  interesting 
question  regarding  Web  application 
performance:  “How  do  you  monitor 
from  the  eyeball?”  In  other  words, 
how  do  you  know  what  end  users  are 
experiencing  from  your  application 
if  they  don’t  (and  they  overwhelming 
do  not)  let  you  install  a  performance¬ 
monitoring  agent?  The  answer,  says 
the  CEO  of  Symphoniq  Corp.  in  Palo 
Alto,  Calif.,  is  with  his  company’s 
software,  TrueView. 

TrueView  injects  a  few  lines  of 
HTML  code  in  each  Web  page  and 
calls  a  temporary  JavaScript  pro¬ 
gram  that  monitors  the  performance 
of  the  app.  Because  the  JavaScript 
monitors  only  its  app  and  doesn’t 
remain  on  the  end  user’s  machine 
after  the  session  is 
over,  Wong  says  the 
product  is  not  spy- 
ware.  He  claims  that 
the  TrueView  injec¬ 
tion  adds  less  than 
3%  of  overhead  to 
Web  page  response 
time.  TrueView 
also  has  probes,  or 
agents,  that  reside 
on  all  of  the  tiers  in 
your  application,  so 
you  can  trace  app  performance  end 
to  end.  Wong  adds  that  TrueView 
is  also  an  ideal  tool  for  testing  Web 
apps  before  they  go  into  production. 
One  drawback:  TrueView  works  only 
with  Internet  Explorer 
and  Firefox  browsers.  But 
TrueView  2.0  adds  sup¬ 
port  for  Flash-,  AJAX-  and 
Silverlight-based  Web  ap¬ 
plications.  Pricing  starts  at 
about  $20,000.  ■ 


Wong: 
Know  how 
Web  users 
experience 
your  online 
app. 
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Save  CBL,  Don’t  ABBRVI8 

TBM  ESTIMATES  that  more  than  30  billion  transactions  occur 
within  Cobol  programs  every  day.  In  contrast,  Google  averages 
about  150  million  searches  each  day,  or  about  0.5%  of  Cobol’s 
daily  workload.  No  one  worries  about  Google  (well,  maybe 
stockholders  who  bought  their  shares  north  of  $700),  but  people 
still  fret  about  Cobol’s  future. 

To  set  the  record  straight  about 
Cobol’s  usefulness,  Micro  Focus  Ltd. 
in  Newbury,  England,  has  published 
a  list  of  “misconceptions”  about  the 
hoary  language.  Craig  Marble,  senior 
solutions  engineer  at  Micro  Focus, 
doesn’t  want  enterprises  that  are 
embarking  on 


The  year  Common 
Business-Oriented 
Language  (Coboi) 
was  created. 


service-oriented 
architecture 
projects  to 
exclude  Cobol 
from  their  de¬ 
velopment  plans 
in  favor  of  “sexier”  languages.  SOA, 
he  says,  “brings  Coboi  up  to  the  same 
level  as  .Net  and  Java.” 

Too  often,  Marble  argues,  SOA 
developers  simply  screen-scrape 
data  and  overlook  the  vital  business 
logic  behind  it.  Ele  says  that  because 
so  many  Cobol  apps  are  built  on 
complex  business  rules,  screen¬ 


scraping  for  Web  apps  can  slow 
response  time  to  a  crawl.  By  bring¬ 
ing  Cobol  into  the  SOA  effort  in  the 
beginning,  he  claims,  you  can  create 
Web  services  that  execute  within 
the  Cobol  back-end  environment, 
with  results  handled  by  Java  or  .Net 
on  the  front  end. 

Cobol  is  ideal  for  creating  busi¬ 
ness  rules  because  it  is  an  English- 
language-based  programming  tool, 
Marble  says.  Even  business  analysts 
can  read  extant  business  logic  in  Co¬ 
bol,  he  adds. 

And  that  raises  another  concern, 
contends  Jerry  Sitner,  a  Cobol  con¬ 
sultant  in  New  York.  He  says  Cobol’s 
clearness  has  been  subverted  by  man¬ 
agement.  Sitner  argues  that  as  man¬ 
agers  pushed  developers  to  crank 
out  code  quickly,  developers  under¬ 
mined  the  value  of  English  in  Cobol 
by  introducing  abbreviations.  For 
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■  THE  GRILL 

David  Rice 

The  author  of  Geekonomics  talks 
about  rating  software,  putting  a 
value  on  vulnerabilities  and  charging 
vendors  for  security  bugs. 


Name:  David  Rice 

Title:  President 

Organization:  Monterey  Group 

Location:  Monterey,  Calif. 

Previous  job:  Global  network 
vulnerability  analyst  at  the 
National  Security  Agency 

Hobbies:  Yoga  and  surfing 

Favorite  technology:  “I  really 
like  mobile  devices  for  the  au¬ 
tonomy  and  the  freedom  they 
give  me  -  but  outside  of  the 
security  context,  in  which  they 
are  a  disaster.” 

Pet  peeve:  The  tendency  to 
always  use  technology  to  try 
and  solve  the  security  prob¬ 
lem.  “What  we  are  doing  now 
doesn’t  change  the  landscape 
from  an  information  security 
perspective.  It  just  adds  more 
entropy  to  the  system.” 

Little-known  fact:  The  original 
name  for  the  Monterey  Group 
was  the  Tantric  Group.  “I  think 
it  had  something  to  do  with  my 
yoga.” 


In  his  new  book,  Geekonomics:  The 
Real  Cost  of  Insecure  Software  (Ad¬ 
dison- Wesley  Professional,  2007),  David 
Rice  says  that  badly  written,  insecure 
software  products  are  hurting  people 
and  costing  businesses  and  individuals 
billions  of  dollars  every  year.  Yet  far 
from  being  penalized  for  it,  he  says,  the 
vendors  of  these  products  have  been 
rewarded  with  greater  market  share  and 
profits  because  of  a  shocking  lack  of  ac¬ 
countability  in  the  software  industry. 


You  say  that  software  products  in  general 
have  had  largely  detectable  and  prevent¬ 
able  security  defects  from  the  beginning. 
Why  aren’t  there  incentives  for  vendors  to 
make  their  products  more  secure?  In  the 
software  market,  we  have  this  problem 
of  asymmetric  information,  which 
means  [buyers  don’t]  always  know 
what  they  are  getting.  Basically,  they 
cannot  distinguish  between  high-  and 
low-quality  software. 

Software  manufacturers  are  doing 
what  any  manufacturer  would  do.  It  is 
not  like  they  are  deliberately  trying  to 
make  crappy  software.  They  are  just 
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■  THE  DRILL  DAVID  RICE 


MYou  can  have 
‘Trustworthy 
Computing’ 
or  ‘Unbreakable,’  but 
[when  software  has 
defects,  vendors]  just 
kind  of  shrug  their 
shoulders.  There’s  no 
punishment  for  being 
wrong. 


trying  to  maximize  profits.  They  really 
don’t  have  any  meaningful  incentive 
to  look  out  for  you.  So  you  can  have 
“Trustworthy  Computing”  or  “Un¬ 
breakable,”  but  they  just  kind  of  shrug 
their  shoulders.  There’s  no  punish¬ 
ment  for  being  wrong. 

How  do  you  induce  software  vendors  to 
write  more-secure  software?  We  need 
to  make  it  more  expensive  for  people  to 
produce  low-quality  software.  Most  of 
us  want  security  in  our  software.  We 
just  can’t  distinguish  when  it  isn’t  there. 
So  it  is  very  difficult  for  us  to  price  it. 

How  do  you  price  vulnerabilities?  One 

mechanism  is  to  price  vulnerabilities 


like  you  price  carbon  emissions.  So 
you  can  say  that  for  anything  a  US- 
CERT  or  someone  like  that  identifies 
as  a  vulnerability,  you  are  going  to  get 
taxed  a  certain  amount.  All  of  a  sudden 
you  have  an  incentive,  because  vendors 
have  to  pay  for  the  cost  of  emission. 
Costs  that  have  never  been  associated 
with  their  product  now  have  to  be  ac¬ 
counted  for.  Any  good  company  would 
say,  “I  need  to  reduce  my  production 
costs.”  But  the  cost  of  fixing  the  vul¬ 
nerability  has  to  be  less  than  the  price 
of  the  vulnerability.  What  we  get  then 
is  a  pretty  good  situation,  because  the 
vendor  [and]  the  market  can  price  se¬ 
curity,  and  so  can  the  consumer. 

The  complexity  comes  from  the  fact 
that  all  vulnerabilities  are  not  equal. 
Some  are  not  so  serious;  some  are  ab¬ 
solutely  critical.  But  the  model  is  an 
interesting  thing  to  explore. 

What  do  consumers  need  to  know  about 
software  security?  Security  has  to  be 
made  more  visible  in  some  way.  Right 
now,  it  isn’t.  The  quality  or  safety  of  a 
vehicle  isn’t  all  that  obvious  to  a  buyer 
either.  So  the  National  Highway  Traffic 
Safety  Administration  has  assigned  a 
five-star  rating  system  for  vehicles.  A 
consumer  can  walk  up  to  a  car  and  say, 
“Five  stars  are  better  than  four  stars.” 
That  has  made  safety  more  visible  to 
consumers,  so  they  can  price  it.  That 
means  that  it  is  actually  more  expen¬ 
sive  for  a  manufacturer  to  produce  a 
low-quality  car,  because  they  are  not 
going  to  sell  as  many  cars  as  a  five-star 
manufacturer. 

With  software,  [the  situation]  is 
completely  inverted.  It  is  incredibly  in¬ 
expensive  for  me  to  make  a  low-quality 
product  and  get  rewarded  for  it  by  the 
market,  because  no  one  can  distinguish 
good-quality  software  in  the  market. 

What  would  a  five-star  rating  system 
look  like  in  the  software  context?  It  still 
needs  to  be  worked  out.  Software  is 
more  complex.  What  is  required  is 
some  sort  of  an  objective  measure¬ 
ment.  It  doesn’t  have  to  be  a  five-star 
rating.  It  just  has  to  be  some  consistent 
and  measurable  information  source. 

Why  hasn’t  that  happened  yet?  When  we 
look  at  the  auto  manufacturer  market, 
it  wasn’t  just  government  regulations 


that  compelled  auto  manufacturers  to 
change.  It  was  the  removal  of  the  doc¬ 
trine  of  privity.  Auto  manufacturers 
distributed  their  cars  to  dealers,  who 
then  sold  the  cars  to  consumers.  The 
doctrine  of  privity  shielded  the  manu¬ 
facturer  from  liability. 

When  you  look  at  the  software  in¬ 
dustry  right  now,  the  shielding  from 
liability  is  almost  unprecedented.  If 
you  buy  software,  you  are  left  literally 
holding  a  huge  bucket  of  risk.  Almost 
all  liability  is  the  buyer’s. 

Who  needs  to  take  the  next  step?  You 

are  probably  going  to  see  some  furtive 
steps  on  the  part  of  government.  In 
general,  they  have  done  a  good  job  of 
informing  manufacturers  that  these 
are  the  sort  of  practices  [they]  want 
you  to  follow.  Maybe  a  little  more  tort 
action  [will  happen]  when  people  start 
realizing  that  the  liabilities  being  im¬ 
posed  on  them  are  really  unreasonable. 
It  took  probably  20  years  [from]  the 
first  attacks  on  the  doctrine  of  privity 
[to]  when  the  doctrine  was  finally  re¬ 
moved  in  the  auto  industry.  So  you  are 
probably  going  to  see  the  same  kind 
of  really  slow  growth  in  the  software 
industry  as  well. 

Can’t  government  use  its  buying  power 
to  force  software  vendors  to  make  their 
products  more  secure?  When  you  look 
at  the  global  IT  market,  you  are  look¬ 
ing  at  a  total  expenditure  of  about 
$1  trillion  annually.  If  all  of  govern¬ 
ment  brings  their  buying  power  to¬ 
gether,  that’s  about  $70  billion.  In  the 
larger  scheme  of  things,  that  is  under 
10%  of  the  market.  There  are  still 
plenty  of  other  buyers  that  software 
vendors  can  go  to.  So  you  have  to  bring 
more  weight  to  bear. 

What  is  the  take-away  in  all  of  this? 

We  have  to  invert  the  market  and  make 
it  more  expensive  to  create  bad  soft¬ 
ware.  How  we  go  about  it  is  through  a 
combination  of  licensure  on  software 
developers,  tort  liability,  maybe  a  little 
bit  of  government  intervention,  maybe 
directly  in  terms  of  some  sort  of  pricing 
mechanisms  like  [for]  carbon  emissions. 
There  is  no  really  clear  path  forward. 
Maybe  the  problem  is  there  are  not 
enough  smart  people  talking  about  it. 

—  Interview  by  Jaikumar  Vijayan 
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Speed  up  Your  Systems  in  Real  Time 

The  8  Essential  Benefits  of  Automatic  Defragmentation 


Fragmentation  is  unavoid¬ 
able.  It  wreaks  havoc  on 
hard  disks,  causing  crashes, 
hangs  and  complete  system 
failures. 

Diskeeper  2008  eliminates 
fragmentation — automatically. 
It’s  the  real-time  solution  to 
your  performance  and  reli¬ 
ability  problems.  Diskeeper 
is  absolutely  indispensable.  It 
speeds  up  boot  times,  makes 
applications  launch  faster  and 
improves  the  efficiency  of 
backups  and  anti-virus  scans. 
Diskeeper’s  benefits  have 
proven  time  and  time  again 
to  be  a  vital  part  of  system 
administration. 

We  asked  254  of  our  customers 
what  were  the  essential  benefits 
of  using  Diskeeper.  This  is  what 
they  had  to  say: 


The  8  Essential  Benefits  that  Diskeeper  Provides 

As  chosen  by  254  Diskeeper  Customers 

Transparent  Defrag  Runs  Unnoticed 

aBn 


Reliability  Restored 


Pushes  System  Performance  to  Its  Peak 


Thanks  to  all  our  customers  who  participated. 


1.  PUSHES  SYSTEM 
PERFORMANCE  TO  ITS  PEAK 

“We  had  one  machine  that 
had  a  failing  drive  in  a  RAID 
5  array  and  when  we  replaced 

that  drive,  performance  improved  by  300%.  And  then  when 
I  ran  Diskeeper  for  a  week,  again  it  improved  over  300%.  A 
disk  intensive  process  that  was  taking  1.5  hours  is  now  taking 
15  minutes.” 

2.  RELIABILITY  RESTORED 

“We  use  Microsoft®  SQL  Server®.  We  were  receiving  hundreds 
of  messages  per  day  in  the  log  like  this  one:  SQL  Server  has 
encountered  21  occurrencefs)  of  I/O  requests  taking  longer  than 
15  seconds  to  complete  on  file  [E:\mssql\data\. . .] 

“We  researched  this  error  and  found  that  it  is  usually  caused 
by  badly  fragmented  hard  drives.  While  our  drives  are  part  of 
a  large  SAN  solution,  we  were  not  totally  convinced  that  this 
should  be  causing  the  problem.  We  downloaded  a  trial  version 
of  Diskeeper  and  after  running  it,  all  of  these  errors  disap¬ 
peared!  We  have  purchased  5  copies  of  Diskeeper  and  we  are 
installing  them  on  all  of  our  production  databases  with  the 
expectation  to  never  see  this  error  again!” 

3.  TRANSPARENT  DEFRAG  RUNS  UNNOTICED 

“The  server  automatically  defragments  only  when  there  are  idle 
resources.  No  more  worrying  about  when  I  can  schedule  defrag¬ 
mentation,  no  more  worrying  about  if  the  defragmentation  will 
cause  performance  issues.  InvisiTasking”  has  worked  great  for  us 
on  everything  from  file  and  print  servers  to  SQL  servers.” 

4.  DEFENDS  CRITICAL  SYSTEM  FILES  FROM  FRAGMENTATION 

“I  have  been  using  Diskeeper  at  my  office  on  the  63  workstations 
and  4  servers  over  the  last  year.  The  addition  of  Frag  Shield1”  2.0 
eliminates  the  task  of  manually  changing  the  MFT.  In  the  past 


Saves  Money  and  Time 

mm 

Eliminate  Costly  Hardware  Upgrades 

■ 

Extreme  Condition  Defragmentation 


Defends  Critical  System  Files  from  Fragmentation 


Speed  Up  Virus  Scans  and  Boot  Ups 


most  of  my  MFTs  needed  adjust¬ 
ment.  Now  that  this  function  is 
automatic,  1  don’t  have  to  manu¬ 
ally  check  it.” 

5.  SAVES  MONEY  AND  TIME 

“Prior  to  installing  Diskeeper,  we 
were  manually  defragmenting. 
Some  of  the  drives  would  take 
hours  to  defrag  and  within  a  few 
days  we  would  need  to  defrag 
again.  Installing  Diskeeper 
basically  paid  for  itself  within 
a  month  by  reducing  off-hour 
salaries.  Also  the  defragmented 
drives  perform  better  and  last 
longer.  It’s  a  no-brainer  for  pro¬ 
duction  machines.” 

6.  SPEED  UP  VIRUS  SCANS  AND 
BOOT  UPS 

“Diskeeper  saves  time  in  doing 
virus  scans,  backing  up,  index¬ 
ing  and  searching  the  files. 
There  are  also  faster  download 
times  for  users  because  of  the 
lower  load  on  the  defragment¬ 
ed  RAID.” 


7.  EXTREME  CONDITION  DEFRAGMENTATION 

“One  day  our  SQL  Server  came  to  a  halt.  I  did  everything:  ran 
spyware  software,  deleted  numerous  .TMP  files,  ran  Windows® 
update,  etc.  But  nothing  got  the  server  to  run.  Then  I  installed 
and  ran  Diskeeper;  I  found  that  the  hard  drive  was  horribly 
fragmented.  But  after  Diskeeper  finished  defragging  the  system, 
the  server  came  up.” 

8.  ELIMINATE  COSTLY  HARDWARE  UPGRADES 

“We  were  looking  at  having  to  replace  or  upgrade  some  of 
the  servers  because  they  were  so  slow.  Since  the  Diskeeper 
install,  they  are  performing  well  enough  that  we  are  no  longer 
looking  at  the  upgrades  and  replacements.” 

Diskeeper  is  essential  for  maximum  speed  and  reliability  on 
networked  systems.  Accelerate  your  systems’  performance. 
Restore  reliability.  Try  Diskeeper  2008  for  free  now! 


SPECIAL  OFFER 


Trv  it  FRFF  Wlth  InvisiTasking- 

f  AR  Ha  ci  Diskeeper 2008 

Ida  ^tO  Udyb!  Maximizing  Performance  and  Reliability — Automatically™ 

Go  to  www.diskeeper.com/cwtria! 

(Note:  Special  45-day  trialware  is  only  available  at  the  above  link) 

Volume  licensing  and  Government/Education  discounts  are  available  by  calling 
800-829-6468,  extension  4058. 
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Let’s  face  it:  Training  debacles  aren’t 
always  the  users’  fault.  By  Beth  Stackpole 


YOU  JUST  ROLLED  OUT  Windows 
Vista  companywide,  only  to 
find  your  help  desk  flooded 
with  calls.  Or  you  spent  hours 
with  the  mobile  sales  group 
going  over  the  basics  of  laptop 
and  wireless  security,  only  to  discover 
team  members  still  opening  rogue 
e-mail  attachments. 

Sound  familiar?  The  problem  could 
be  in  your  training. 

Given  the  increased  corporate  empha¬ 
sis  on  return  on  investment,  the  pressure 
is  on  to  get  users  comfortable  and  pro¬ 
ductive  on  new  systems  quickly.  Though 
it’s  natural  for  IT  to  cast  blame  on  users 
when  they  fail  to  embrace  new  or  up¬ 
graded  systems,  IT  should  also  consider 
its  own  role  in  training  debacles. 

A  good  training  program  should 
count  as  a  competitive  advantage,  but 
“companies  don’t  yet  fully  value  train¬ 
ing,”  says  David  S.  Murphy,  founder  of 
the  nonprofit  International  Association 
of  Information  Technology  Trainers, 
a.k.a.  ITrain. 

That  may  be  true  in  part  because 
training  is  rarely  done  well.  We  talked 
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to  IT  managers,  trainers,  industry  ad¬ 
vocates  and  academics  to  uncover  the 
top  five  mistakes  IT  pros  make  when 
they  train  users. 


1  TRAINING  IS  AN  AFTERTHOUGHT. 

IT  budgets  have  been  under  close 
scrutiny  for  years,  and  the  dol¬ 
lars  earmarked  for  training  have  been 
among  the  hardest  hit,  says  Murphy. 

As  a  result,  many  companies  don’t  fac¬ 
tor  training  into  the  total  cost  of  sys¬ 
tem  rollouts  and  are  left  scrambling  for 
resources  at  the  end  of  the  deployment. 

Consensus  in  the  industry  dictates 
that  a  good  training  program  should  ac¬ 
count  for  10%  to  13%  of  the  total  project 
budget,  yet  most  companies  underesti¬ 
mate  the  resources  required,  according 
to  Pat  Begley,  vice  president  of  learning 
solutions  at  RWD  Technologies  Inc., 
a  professional  services  company  that 
does  user  training.  “Many  times,  orga¬ 
nizations  feel  they  have  the  bandwidth 
within  the  IT  team  to  do  the  training, 
but  they  don’t  realize  how  tied  up  those 
people  are  going  to  be,”  she  explains. 
Companies  also  frequently  fail  to 


plan  for  training  after  the  initial  de¬ 
ployment,  says  Weston  Morris,  chief 
architect  at  Unisys  Corp.’s  strategic 
programs  office  for  Microsoft  products. 
After  a  time  on  a  new  system,  users 
typically  advance  to  more  sophisticated 
functions,  but  training  often  doesn’t 
cover  that.  As  a  result,  says  Murphy,  us¬ 
ers  are  left  to  muddle  through  on  their 
own,  and  their  companies  lose  some 
of  the  business  benefits  for  which  they 
purchased  systems  in  the  first  place. 


2  YOU’RE  OUT  OF  TUNE  WITH 
YOUR  AUDIENCE. 

For  training  to  be  effective,  it’s 
not  enough  for  the  instructor  to  have 
mastery  of  the  material.  He  also  needs 
to  be  able  to  connect  with  the  audience 
and  present  information  in  an  interac¬ 
tive  and  engaging  manner.  But  IT 
professionals  aren’t  known  for  their 
communication  skills. 

“Just  because  someone  is  an  expert 
in  a  subject  and  their  passion  is  tech¬ 
nology,  that  doesn’t  make  them  a  good 
trainer,”  Murphy  says.  “We  tend  to 
put  subject  matter  experts  in  training 
positions.  We  should  be  putting  people 
with  expertise  in  education  and  adult 
learning  into  those  positions.” 

“Lots  of  times,  IT  won’t  tell  people 
what  they  need  to  know,  or  they  give 
people  a  long,  technical  explanation 
which  is  not  meaningful,  and  then 
they’ve  lost  the  audience,”  says  Mary 
Kelley,  president  of  Intelligo  Inc.,  a 
Denver-based  firm  that  provides  user 
training  and  support  for  ERP  systems. 

Indeed,  one  of  the  biggest  mistakes 
IT  professionals  make  when  preparing 
training  is  not  adequately  assessing  the 
needs  of  their  audiences.  “We  don’t  take 
the  time  before  we  design  a  training 
program  to  interview  both  the  people 
who  will  be  trained  and  their  supervi¬ 
sors  or  managers,”  Murphy  explains. 

Interviewing  employees  before  cre¬ 
ating  a  training  curriculum  is  critical, 
he  maintains,  because  that’s  the  only 
way  for  trainers  to  get  a  true  sense  of 
the  skill  level  of  the  user  group.  Bring¬ 
ing  supervisors  into  the  interview 
process  is  equally  important,  because 
they  have  a  broad  perspective  on  what 
has  and  hasn’t  worked  before  for  their 
direct  reports.  In  addition,  supervisors 
often  have  specific  goals  in  mind  for 
the  training,  Murphy  says. 
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3  YOU  DIDN’T  FOLLOW  STANDARD 
TRAINING  MODELS. 

Training  a  user  community  to 
work  with  a  major  business  tool,  like 
an  ERP  application,  or  a  new  operating 
system,  like  Windows  Vista,  involves 
a  lot  more  than  showing  employees 
how  to  navigate  a  new  desktop  or  run  a 
specific  report.  Major  system  upgrades 
mean  major  upheaval  in  the  way  users 
work,  and  technology  training  should 
help  users  embrace  those  changes. 

“Users  need  to  feel  comfortable  with 
change.  They  need  to  know  what’s 
happening  and  how  it  affects  their 
role,”  a  concept  the  training  commu¬ 
nity  refers  to  as  “organizational  readi¬ 
ness,”  says  Begley. 

Unfortunately,  IT  often  comes  at 
things  from  a  different  angle.  “IT 
doesn’t  typically  consider  organiza¬ 
tional  readiness  as  part  of  the  train¬ 
ing,”  she  says.  “They  typically  look  at 
building  competency.” 

For  their  part,  professional  training 
companies  stress  the  importance  of 
formal  learning  models  —  that  is,  best 
practices  for  teaching  different  kinds 
of  learners  —  as  critical  to  a  training 
program’s  success. 

RWD’s  learning  methodology,  for 
example,  includes  a  preparation  com¬ 
ponent  that  tells  users  what  to  expect 
and  explains  the  specifics  of  how 
business  processes  will  change;  a  run- 
through  of  what  the  new  transactions 
will  look  like;  a  “try-it”  phase,  where 
users  can  test-drive  the  system  prior  to 
going  live;  and  a  support  stage,  during 
which  help  is  accessible  on  an  ongoing 
basis.  IT’s  skills  are  focused  on  the  run- 
through  stage  of  training,  but  not  the 
other  areas,  Begley  says,  and  that  can 
result  in  less-than-effective  training. 

Standardization  in  training  materi¬ 
als  is  another  area  where  IT  often  falls 
short.  Users  need  multiple  reference 
points  for  learning  a  system,  notes 
Intelligo’s  Kelley,  be  it  step-by-step 
instructions,  quick  reference  cards 
or  Web-based  training.  That  material 
should  be  delivered  and  maintained  in 
a  standardized  way. 

4  YOU’RE  TRAINING  OUT  OF 
BUSINESS  CONTEXT. 

IT  may  be  comfortable  with 
instruction  on  the  details  of  how  to  use 


A  HARD  LESSON  LEARNED 


UNISYS  CORP.  learned  about  the  importance 
of  upfront  planning  the  hard  way  several 
years  back  during  a  companywide  rollout  of 
Windows  XP  and  Microsoft  Office  2003.  At 
the  time,  the  company  didn’t  have  a  prerollout 
training  program  in  place  for  the  software. 

As  a  result,  Unisys  University,  a  company¬ 
wide  training  group,  didn’t  partner  with  IT 
to  deal  with  training  issues  until  after  the 
software  had  landed  on  people’s  desktops. 

“There  was  a  flurry  of  calls  about  ‘How 
do  you  do  this?’  ”  recalls  Weston  Morris, 
chief  architect  at  the  company’s  strategic 
programs  office  for  Microsoft  products.  “It 
was  an  expensive  proposition.” 

But  Unisys  learned  a  valuable  lesson  that 
it  is  applying  during  its  current  rollout  of 
Windows  Vista  to  more  than  30,000  users 
-  a  project  that  began  this  month  and  will 


continue  through  2009.  Unisys  University 
and  IT  are  again  jointly  handling  the  Vista 
training,  but  this  time  around,  training  is 
beginning  before  the  software  hits  the 
desktops,  Morris  says. 

The  initiative  includes  the  following: 

■  A  collaborative  effort  with  the  Unisys 
early-adopter  community  to  identify  com¬ 
mon  trouble  spots  for  users. 

■  Creation  of  customized  training  exercis¬ 
es  that  will  address  the  concerns  identified. 

■  A  program  requiring  users  to  complete 
Vista  training  and  get  certified  before  they’re 
upgraded  to  the  new  operating  system. 

“We  want  to  make  sure  [users]  have  a 
basic  understanding  of  the  technology  so 
they’re  not  going  to  be  calling  the  help  desk 
with  silly  questions,”  Morris  explains. 

-  BETH  STACKP0LE 


a  particular  CRM  package  or  how  to 
securely  configure  a  laptop  or  wireless 
network,  but  the  training  often  stops 
there.  What’s  missing  are  lessons  on 
how  to  use  that  new  system  to  augment 
traditional  work  patterns.  To  provide 
those,  IT  trainers  need  to  understand 
business  functions  such  as  marketing 
and  procurement  —  knowledge  they 
don’t  always  have. 

“The  purpose  of  training  is  to  help  a 
company  be  more  productive  in  mak¬ 
ing  money,”  explains  ITrain’s  Murphy. 
“That  means  the  trainer  has  to  under¬ 
stand  the  business  and  organizational 
functions,  and  that’s  where  very  con¬ 
fident  technicians  often  miss  the  boat. 
They’re  focused  on  the  details  of  their 
equipment  rather  than  the  whole  pur¬ 
pose  of  having  that  equipment.” 

Menno  Aartsen  learned  the  impor¬ 
tance  of  business  context  years  ago, 
when  he  trained  early  laptop  users  at 
three  divisions  within  Verizon  Com¬ 
munications  Inc. 

The  IT  training  team  emphasized 
how  mobility  could  change  users’ 
work  patterns.  So  rather  than  simply 
instructing  users  on  how  to  use  dock¬ 
ing  stations  or  USB  memory  devices, 
the  training  team  demonstrated  how 
mobility  could  help  workers  log  on 
remotely  at  night  or  catch  up  on  paper¬ 
work  during  their  commutes,  which 


were  new  practices  at  the  time. 

“We  positioned  mobility  as  a  tool 
that  could  enable  new  kinds  of  work,” 
Aartsen  says. 


5  YOU  NEGLECTED  TO  FORGE 
BUSINESS  PARTNERSHIPS. 

Since  so  much  of  what  consti¬ 
tutes  good  training  goes  beyond  the 
purview  of  IT,  it’s  critical  that  IT  reach 
out.  Human  resources  departments 
and  in-house  training  groups  are 
obvious  candidates  for  partnerships 
that  can  help  IT  bring  the  requisite 
business  context  and  formal  learning 
methodologies  to  its  curriculum. 

Reaching  into  the  user  community 
is  another  good  option.  IT  might  do  a 
phased  rollout  to  “superusers”  first  and 
leverage  their  feedback  and  expertise 
to  tailor  training  for  the  remaining  us¬ 
ers.  This  supergroup  is  also  the  same 
community  that  tends  to  rely  heavily 
on  Web  2.0  technologies,  such  as  blog¬ 
ging  and  wikis,  all  of  which  can  play 
an  important  role  in  technology  train¬ 
ing,  experts  say. 

Whatever  the  system  being  rolled 
out,  the  message  for  IT  is  clear:  It’s 
not  just  users  who  have  a  lot  to  learn; 
you’ve  also  got  some  work  to  do  to 
make  training  a  core  IT  discipline.  ■ 
Stackpole  last  wrote  for  Computerworld 
about  future  IT  workers. 
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_DAY  74:  We  need  a  proper  Web  interface  for  our  customers, 
suppliers  and  employees!  We  don’t  have  the  time  to  respond 
to  all  their  unique  needs.  That  would  take  six  of  us. 

_Six  Gils?  They’d  better  not  all  have  to  sign  my  time  sheet. 

.DAY  76:  The  answer:  IBM  WebSphere  Portal.  It  provides  a 
personalized,  security-rich  interface  that  lets  all  of  our 
clients  work  the  way  they  want.  Its  collaborative  Web  2.0 
technology  encourages  stronger  business  relationships. 
And  with  IBM  accelerators  for  WebSphere  Portal,  we  can 
deploy  new  projects  and  respond  to  our  clients  faster. 

.Back  to  one  Gil.  There’s  so  much  less  of  him  to  love  now. 


■ 
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At  a  Glance 

■  Medical  Missions  for  Children  is 
a  nonprofit  organization  that  uses 
technology  to  disseminate  medical 
care  and  knowledge  from  the  U.S. 
to  medically  underserved  locales 
around  the  world.  Its  annual  budget 
is  $15  million,  90%  of  which  goes  to 
technology  costs. 

■  Project  champions  include  MMC 
co-founders  Frank  and  Peg  Brady, 
and  President  and  COO  John  Riehl. 

■  The  organization  has  18  full-time 
workers,  with  10  in  technology- 
related  positions. 

■  MMC  has  saved  thousands  of 
children’s  lives  while  also  spreading 
medical  knowledge  around  the  world, 
thereby  allowing  local  doctors  to  use 
their  new  skills  to  more  effectively 
treat  other  patients. 


technology  innovation. 

In  some  ways,  Brady,  65,  has  spent  his 
whole  life  readying  himself  for  this  mis¬ 
sion.  After  he  contracted  spinal  menin¬ 
gitis  as  a  1-year-old,  the  doctors  told  his 
parents  that  their  son  had  only  three 
weeks  to  live.  But  a  week  later,  they 
suggested  trying  penicillin  —  at  the 
time,  an  experimental  drug  that  hadn’t 
been  tested  on  pediatric  patients. 

The  treatment  worked,  convinc¬ 
ing  Brady’s  mother  that  the  boy  was 
spared  so  he  could  do  something  spe¬ 
cial  with  his  life. 

Brady’s  path  thereafter  wasn’t  unusu¬ 
al.  He  spent  most  of  his  35-year  career 
working  in  international  business.  But 
he  didn’t  forget  his  mother’s  words. 

“After  raising  a  family  and  retiring 
[in  1997],  those  words  that  my  mother 
said  over  and  over  again  forced  me 
to  look  for  something  special,”  Brady 
says,  explaining  that  he  and  his  wife, 
Peg,  wanted  to  help  families  facing 
medical  crises  similar  to  his  own. 

MMC  does  just  that.  It  allows  partici¬ 
pating  hospitals  in  developing  countries 
to  contact  medical  specialists  from  U.S. 
hospitals  to  help  diagnose  and  treat  se¬ 
verely  ill  children.  The  consultation  is 
done  through  teleconferencing,  obviat¬ 
ing  the  time  and  expense  of  travel. 

Brady  says  there’s  a  dire  need  for 
such  services.  One  out  of  every  three 
children  who  comes  to  MMC  has  been 
misdiagnosed,  and  85%  of  the  properly 
Continued  on  page  26 
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network  called  the  Telemedicine 
Outreach  Program  so  they  can  help 
diagnose  and  treat  children  worldwide. 
Technology  also  has  allowed  MMC  to 
expand  its  services  to  include  educa¬ 
tional  content  for  health  care  providers 
and  patients  in  multiple  countries. 

“MMC  fulfills  a  host  of  health- 
related  needs  throughout  the  world,” 
says  Alberto  Salamanca,  the  Mexico- 
based  president  of  MMC ’s  Latin  Amer¬ 
ica  region.  “Technology  has  proven  to 
be  the  most  important  tool  to  carry  the 
mission  and  vision  of  MMC.” 

Computerworld  named  Medical  Mis¬ 
sions  for  Children  the  winner  in  the 
nonprofit  organization  category  in  its 
annual  Honors  Program  recognizing 


RANK  BRADY  expects  to  cel¬ 
ebrate  a  significant  milestone  in 
June:  His  Medical  Missions  for 
Children  charity  will  treat  its 
30,000th  child  that  month. 

That’s  an  impressive  record  for  the 
nine-year-old  nonprofit  organization, 
which  connects  leading  U.S.  doctors 
with  doctors  and  their  pediatric  pa¬ 
tients  all  over  the  world. 

MMC  uses  telecommunications 
technology  and  other  IT  tools  to  bridge 
gaps  in  knowledge,  treatment  and  geo¬ 
graphy.  The  organization  has  created 
what  it  calls  the  Global  Telemedicine  & 
Teaching  Network  to  enable  U.S.-based 
doctors  to  consult  with  foreign  pediatric 
physicians  through  a  distance-medicine 


Goodwill  Mission 

Teleconferencing  paired  with  medical 
diagnostic  equipment  helps  save  children’s 
lives  worldwide.  By  MaryK.  Pratt 
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_DAY  84:  Feeling  really  disconnected.  We’re  not  getting 
the  most  out  of  our  existing  assets.  Service  and 
application  integration  is  a  nightmare.  We’ve  got  to 
stop  working  on  these  islands. 

.Please  rescue  me  from  this  lack  of  connectivity. 

.DAY  87:  We’re  saved!  With  IBM  WebSphere  solutions  we 
can  service-enable  and  connect  our  existing  assets  for 
mission-critical  goals.  Now  we  can  reuse  existing 
applications  and  save  money  by  eliminating  redundant 
systems.  We’re  ready  for  any  SOA  integration  project. 

.Plus,  no  more  jellyfish  stings. 


V* 
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Continued  from  page  24 
diagnosed  patients  need  their  treat¬ 
ments  adjusted. 

MMC’s  first  case  linked  doctors 
at  St.  Joseph’s  Children’s  Hospital  in 
Paterson,  N.J.,  where  MMC  is  based, 
to  physicians  in  Panama  treating  an  8- 
year-old  boy  with  a  cranial  deformity. 

Brady  used  about  $100,000  from  his 
retirement  savings  to  buy  Polycom  Inc. 
teleconferencing  equipment,  which 
included  integrated  diagnostic  equip¬ 
ment  in  addition  to  a  monitor,  a  camera 
and  speakers,  for  the  Hospital  del  Nino 
in  Panama  City.  He  also  bought  a  Poly¬ 
com  setup  for  doctors  at  St.  Joseph’s. 

“We  showed  it  could  work,  and  we 
started  putting  it  in  hospitals  around 
the  world,”  Brady  says. 

The  MMC  network  now  connects 
volunteer  doctors  from  27  Tier  1  U.S. 
hospitals  with  pediatric  health  care 
facilities  in  108  countries. 

In  addition,  MMC  now  operates 
a  global  satellite  and  IPTV  network 
called  the  Medical  Broadcasting  Chan¬ 
nel,  as  well  as  the  Global  Video  Library 
of  Medicine  and  the  Giggles  Children’s 
Theater,  which  brings  entertainment  to 
pediatric  patients  in  the  U.S. 

“It’s  a  great  humanitarian  use  of 
telemedicine,”  says  Craig  Stephens,  an 
associate  professor  of  biology  at  Santa 
Clara  University  in  California  and 
chairman  of  the  judging  panel  for  the 
health  category  of  The  Tech  Museum 
Awards  program,  which  is  adminis¬ 
tered  by  The  Tech  Museum  of  Inno¬ 
vation  in  San  Jose.  MMC  was  a  2006 
Tech  Museum  Awards  laureate. 

As  it  grows,  MMC’s  IT  needs  remain 
very  similar  to  what  they  were  in  its 
early  days,  says  John  Riehl,  MMC’s 
president  and  chief  operating  officer. 

However,  compared  with  earlier 
tools,  today’s  teleconferencing  equip¬ 
ment  supports  much  richer  interac¬ 
tions  among  doctors  and  offers  more- 
advanced  diagnostic  capabilities.  For 
example,  cameras  can  provide  magni¬ 
fied  views  of  the  skin,  and  scopes  can 
look  into  patients’  eyes  and  noses. 

MMC  has  also  started  employing 
high-definition  videoconferencing 
equipment,  which  can  be  used  to  view 
digital  images,  Riehl  says.  This  gives 
doctors  real-time  access  to  MRIs,  CT 
scans  and  X-rays,  without  loss  of  image 
quality. 


“They  can  look  at  the  same  image  at 
both  locations  with  quality  that  allows 
them  to  draw  diagnostic  conclusions,” 
Riehl  says. 

Improvements  in  equipment  haven’t 
addressed  all  of  MMC’s  challenges, 
however.  Brady  says  there  are  times 
when  MMC  must  send  its  own  staffers 
to  foreign  hospitals  to  set  up  equipment 
because  of  a  lack  of  on-site  expertise. 
The  World  Bank,  which  provides  equip¬ 
ment  for  hospitals  around  the  world, 
also  helps  install  MMC’s  equipment. 
Polycom  has  also  provided  support  to 
hospitals,  Brady  says. 

Cost  and  access  to  bandwidth  can 


also  be  challenges. 


Old-Fashioned 
Networking 

Frank  Brady  started  his  tech-driven 
Medical  Missions  for  Children  orga¬ 
nization  with  an  old-fashioned  tool: 
person-to-person  networking. 

“When  I  want  to  meet  with  a  chair¬ 
man,  I  just  keep  on  talking  to  people 
until  I  get  the  right  introduction,” 
Brady  says.  “Even  our  trustees  aren’t 
trustees  because  they  give  us  a  lot 
of  money  -  it’s  because  I  value  their 
Rolodex.  I’m  able  to  get  to  a  whole  lot 
of  people  that  way.” 

Indeed,  Brady’s  ability  to  build 
his  organization  relied  as  much  on 
personal  contacts  as  it  did  on  IT  con¬ 
nections.  For  example,  a  friend  in¬ 
troduced  him  to  Alberto  Salamanca, 
who  at  the  time  was  head  of  the 
Bolivian  mission  to  the  United  Na¬ 
tions.  Salamanca  introduced  Brady 
to  Ambassador  Mary  Morgan-Moss, 
deputy  permanent  representative  of 
the  Republic  of  Panama  to  the  U.N. 

Brady  says  both  people  were 
instrumental  in  introducing  him  to 
contacts  in  Latin  America. 

“You  get  a  lot  more  things  done  if 
you  start  from  the  top  and  work  your 
way  down,”  Brady  says,  noting  that 
he  uses  ambassadors  to  the  U.N.  to 
gain  access  to  -  and  persuade  -  the 
first  ladies  of  various  countries  to  be 


champions  of  MMC’s  work. 

-  MARY  K. 

.  .Vu'S't'  '  !•  I,  U  «.! 1 


PRATT 


For  example,  in  late  2005,  MMC 
started  working  with  Armenia’s  Na¬ 
tional  Institute  of  Child  and  Adoles¬ 
cent  Health.  When  MMC  was  negoti¬ 
ating  for  high-speed  Internet  service 
with  Armenia’s  sole  service  provider, 
the  ISP  initially  asked  for  $7,500  a 
month  before  agreeing  to  $500. 

Despite  the  cost,  the  return  is  signifi¬ 
cant.  Dr.  Konstantin  Ter-Voskanyan,  a 
pediatric  cardiologist  and  president  of 
the  Armenian  Association  of  Pediatric 
Professionals,  says  MMC  collaborated 
with  local  doctors  on  seven  cases  in 
2007,  and  the  collaboration  saved  sever¬ 
al  lives  by  allowing  doctors  to  make  the 
proper  diagnosis  and  set  up  the  right 
treatment.  And  even  in  the  cases  where 
the  patients  died,  “the  consultation  had 
a  positive  impact,”  Ter-Voskanyan  says, 
because  the  exchange  of  information 
helped  the  Armenian  doctors  learn  how 
to  deal  with  similar  cases  in  the  future. 

At  the  request  of  the  Armenian  medi¬ 
cal  community,  MMC  also  implemented 
an  online  environment  for  continuing 
education,  and  it  now  records  and  pub¬ 
lishes  lectures  through  a  portal  it  hosts 
and  makes  those  available  to  Armenia’s 
pediatric  health  care  professionals. 

Riehl  says  that  the  system’s  underly¬ 
ing  technology  is  from  Accordent  Tech¬ 
nologies  Inc.,  which  donated  about  half 
of  the  tools  needed. 

“We  have  always  first  identified  the 
technology  providers  that  offered  the 
goods  and  services  that  best  met  our 
needs  and  then  attempted  to  build  a 
philanthropic  partnership  with  them,” 
Riehl  explains. 

In  addition  to  using  Accordent  equip¬ 
ment  for  its  education  portal,  MMC  uses 
products  from  Intelsat  Ltd.  for  its  satel¬ 
lite  broadcast  technology  and  tools  from 
LHS  Productions  Inc.  for  its  video  library 
and  broadcast  scheduling  setup. 

MMC  also  has  had  a  partnership  with 
Polycom  since  2001,  when  the  Pleasan¬ 
ton,  Calif.-based  vendor  named  MMC  a 
winner  in  a  contest  for  innovative  use  of 
its  videoconferencing  equipment.  Since 
then,  Polycom  has  donated  money  and 
equipment  to  MMC. 

Says  Polycom  Chairman  and  CEO 
Robert  Hagerty,  “It’s  the  ultimate  ex¬ 
ample  of  telemedicine  at  its  finest.”  ■ 
Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 
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_DAY  94:  We  don’t  have  the  insights  to  maintain  our  IT 
service-level  agreements!  We  can’t  deliver  against  our 
objectives.  How  are  we  supposed  to  do  our  jobs  in  the  dark? 

_GiI  rented  a  giant  searchlight  to  give  us  “visibility.” 


Take  the  IT  Service  Management  assessment  at: 

IBM.COM/TAKEBACKCONTROL/VISIBLE 


_DAY  96:  I  found  a  better  way.  Hardware,  software  and 
services  from  IBM  Service  Management  give  us  the 
integrated  visibility,  control  and  automation  we  need. 
We  can  improve  efficiency  and  minimize  risks.  And  we  can 
keep  tabs  on  the  status  of  our  services  at  each  stage 
of  their  lifecycle  while  tracking  our  SLAs  in  real  time. 

_Now  if  only  our  vision  plan  covered  “rampant  idiocy.” 


IBM,  the  IBM  logo,  Tivoli  and  Take  Back  Control  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries. 
©2008  IBM  Corporation.  All  rights  reserved. 
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Coast-to-Coast 

Collaboration 


Virtual  Studio  enables  actors  to 
work  virtually  with  animators. 

By  Jennifer  McAdams 


1/  A/^V  BEST  IN 
CLASS 

This  story  is 
part  of  a  series 
showcasing  the  best  projects  of 
this  year’s  Premier  100  IT  Leaders. 
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DreamWorks 
Animation  SKG 

The  Glendale,  Calif.-based  ani¬ 
mation  production  company 
produces  family  entertainment 
products  using  computer¬ 
generated  graphics.  Its  2006 


Count  actor  and 
comedian  Jerry 
Seinfeld  among 
those  who  have 
benefited  from  DreamWorks 
Animation’s  recent  efforts 
to  inject  more  collaboration 
into  its  film-making  process. 

With  Hewlett-Packard 
Co.’s  Halo  Collaboration 
Studio  as  its  centerpiece, 
DreamWorks  built  its  Vir¬ 
tual  Studio  infrastructure 
over  the  past  year  not  only 
to  include  more  participa¬ 
tion  from  entertainers,  such 
as  Seinfeld,  but  also  to  serve 
as  a  way  for  artists,  anima¬ 
tors,  directors,  producers 
and  others  scattered  among 
geographically  dispersed 
locations  to  participate  in 
projects  more  fully. 

For  Seinfeld,  that  meant 
far  less  buzzing  back  and 
forth  between  his  beloved 
New  York  and  DreamWorks’ 
production  facility  in  Glen- 


revenue  totaled  $394.8  mil¬ 
lion. 

IT  CHAMPION:  Derek  Chan, 
head  of  digital  operations 

IT  STAFF:  94  employees  in 
the  digital  operations  unit  | 

PROJECT  PAYBACK:  The  | 

studio  now  releases  two  movies  |f 

annually;  production-schedule  || 

efficiencies  are  tied  to  the  fact 
that  artists  can  work  on  several  f* 

projects  simultaneously. 

dale,  Calif.,  for  his  work  on 
the  animated  feature  Bee 
Movie.  DreamWorks  also 
houses  operations  in  a  sec¬ 
ond  production  facility,  in 
Redwood  City,  Calif. 

“With  Virtual  Studio, 
we  have  reached  out  to  and 
worked  with  talent  in  ways 
that  were  not  feasible  in 
the  past,”  says  Derek  Chan, 
DreamWorks’  head  of  digital 
operations.  “Jerry  Seinfeld’s 
participation  on  Bee  Movie 
is  an  excellent  example. 
There  were  several  occa¬ 
sions  where  he  worked  from 
his  offices  in  New  York.” 
While  high-end  tele¬ 


presence  systems  appeal  to 
corporations  of  all  sizes,  the 
technology  largely  remains 
a  luxury  of  major  companies 
such  as  DreamWorks,  which 
worked  with  HP  on  both 
the  concept  and  develop¬ 
ment  of  the  Halo  line,  says 
Jayanth  Angl,  an  analyst  at 
Info-Tech  Research  Group 
in  Toronto. 

“High  capital  and  operat¬ 
ing  costs  for  equipment, 
network  bandwidth  and 
management  make  telepres¬ 
ence  still  limited  to  larger 
enterprises,”  Angl  says. 
“Deployment  typically 
constitutes  a  multimillion- 
dollar  investment.  However, 
smaller  organizations  are 
also  looking  at  collaboration 
solutions  that  offer  more 
flexibility,  since  they  can¬ 
not  always  justify  building 
dedicated  videoconference 
rooms.” 

Although  increased  flex¬ 
ibility  for  those  working  on 
its  animated  films  helped 
DreamWorks  justify  the 
purchase  of  such  a  setup, 
that  wasn’t  the  only  goal 
the  company  sought  to 
accomplish  with  this  inten¬ 
sive  IT  project.  It  also 
used  Virtual  Studio  to  help 
divide  the  intensive  pro¬ 
cessing  requirements  of 
animated  films  between  its 


MWith  Virtual  Studio,  we 
have  reached  out  to  and 
worked  with  talent  in  ways  that 
were  not  feasible  in  the  past. 

DEREK  CHAN,  HEAD  OF  DIGITAL  OPERATIONS, 
DREAMWORKS  SKG 


production  houses. 

“The  Virtual  Studio  com¬ 
puter  infrastructure  we’ve 
created  is  designed  to  allow 
artists  at  either  of  our  two 
sites  to  work  on  projects. 
This  gives  DreamWorks 
Animation  the  flexibility 
to  staff  projects  on  an  as- 
needed  basis,”  Chan  says. 

Enhanced  collabora¬ 
tion  and  better  balancing 
between  production  sites 
have  been  key  to  fulfilling 
the  ultimate  dream  behind 
Virtual  Studio:  to  be  able  to 
crank  out  more  movies. 

“The  project’s  main  focus 
was  adding  capability  and 
functionality  —  as  opposed 
to  replacing  equipment 
—  in  order  to  create  the  re¬ 
sources  needed  to  achieve 
the  release  of  two  feature 
animated  films  per  year,” 
Chan  says. 

While  Virtual  Studio 
wasn’t  conceived  as  a  hard¬ 
ware  replacement  project, 
DreamWorks  did  use  the 
opportunity  to  add  sophis¬ 
ticated  technology  to  help 
users  collaborate. 

Along  with  deploying 
HP’s  Halo  suites,  Dream¬ 
Works  revamped  its  WAN 
infrastructure  and  more 
than  tripled  bandwidth  in 
order  to  transport  video, 
computer-aided  design  files 
and  other  high-end  images 
between  sites. 

In  sharing  this  work  be¬ 
tween  sites,  DreamWorks 
also  had  to  hone  storage 
technology  to  mitigate 
latency  and  allow  virtual 
compute  clusters  to  work 
cohesively. 

“The  largest  challenge 
has  been  making  these 
changes  while  active  pro¬ 
duction  continued,”  notes 
Chan.  “It’s  akin  to  changing 
the  wheels  on  a  car  while 
the  car  is  moving.”  ■ 
McAdams  is  a  freelance  writ¬ 
er  in  Vienna,  Va.  Contact  her 
at  JMTechWriter@aol.com. 
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»  Troubled  by  evolving  network  threats?  As  you  open  up  the  network  to  more  users 
and  deploy  newer  apps  and  business  initiatives,  your  security  should  keep  pace. 
Only  Juniper  Networks  gives  you  unprecedented  protection  from  attacks  while 
providing  visibility  across  the  network.  So  defend  against  application-layer  threats 
and  minimize  downtime.  Deliver  valuable  assets  to  a  wider  base  of  users.  Adhere 
to  regulatory  compliance  requirements. 

Juniper’s  broad  security  portfolio  lets  you  leverage  the  network  in  new  ways,  to  achieve 
greater  business  goals.  The  switch  is  on  to  Juniper  Networks:  www.juniper.net/secure 


Juniper 


u 


Net 


1.888.  JUNIPER 
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A  Telco  Giant 
Gets  Agile 


How  BT  Group 
overcame  barriers  to 
agile  programming. 

By  Thomas  Hoffman 


N  2005,  bt  group  plc  began 
replacing  an  aging,  Unix-based 
phone-traffic  monitoring  system 
with  a  Web-centric  architec¬ 
ture.  The  intent:  to  allow  traffic 
managers  to  make  quicker  changes  to 
switches  and  other  physical  devices  to 
handle  shifts  in  network  loads  —  on 
any  point  in  the  company’s  vast  tele- 


Developing 

Skills 


Here’s  how  BT  tweaked 
its  developers’  agile  skills: 


■  A  series  of  classes  in 
“people”  skills  and  agile 
methods  for  programmers. 


■  Hands-on  training  ses¬ 
sions  for  programmers  to 
augment  classroom  learning. 

■  Recruitment  of  IT  profes¬ 
sionals  with  agile  experience 
in  a  variety  of  industries. 

■  Having  those  experienced 
recruits  coach  developers 
who  are  new  to  agile  pro¬ 
gramming. 


communications  network  —  without 
risking  system  overloads. 

At  the  time  the  rollout  began,  few 
people  in  the  company  even  knew  how 
the  old  system  worked,  and  the  project 
team  knew  it  would  be  a  bear  to  up¬ 
grade,  says  Kerry  Buckley,  a  lead  soft¬ 
ware  developer  in  Ipswich,  England, 
who  worked  on  the  initiative. 

The  new  system  has  made  the  load¬ 
balancing  work  of  the  phone-traffic 
controllers  much  easier.  But  the  most 
interesting  part  of  the  development 
effort  was  this:  The  project  was 
completed  within  the  construct 
of  BT’s  then-nascent  90-day  agile- 
development  cycle. 

The  central  ideas  behind  agile  pro¬ 
gramming  are  to  code  quickly,  test  out 
what  you’ve  done  with  users,  fix  any 
problems  and  then  move  on. 

Prior  to  the  London-based  telecom¬ 
munications  giant’s  shift  to  an  agile 
development  methodology  in  2005, 

IT  development  was  slow  and  steady, 
according  to  Al-Noor  Ramji,  CIO  at 
BT  Group  and  CEO  of  BT  Design,  its 
IT  division.  It  could  take  three  to  nine 
months  for  a  third-party  developer  to 
gather  specifications  for  a  new  project. 
Then  the  development  itself  could 
take  as  much  as  18  months  to  complete. 
A  traditional  software  testing  cycle, 
typically  performed  after  coding  was 
completed,  could  prolong  the  project 
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The  Roots  of  Agile  Development 

Perhaps  the  most  succinct  discussion  of  agile  development 
comes  from  the  nonprofit  Agile  Alliance,  whose  members  wrote  the 
following  Manifesto  for  Agile  Software  Development  in  2001: 

We  are  uncovering  better  ways  of  developing  software  by  doing  it 
and  helping  others  do  it.  Through  this  work,  we  have  come  to  value: 

I - 

■  Individuals  and  interactions  over  processes  and  tools 


Working  software  over  comprehensive  documentation 


$£11*8. 


Customer  collaboration  over  contract  negotiation 


■  Responding  to  change  over  following  a  plan 

That  is,  while  there  is  value  in  the  items  on  the  right, 
we  value  the  items  on  the  left  more. 


M  Historically,  we  used 
to  do  16  or  17  different 
types  of  tests.  Now,  we’ve 
determined  that  only  one 
test  matters:  from  customer 
concept  to  completion. 

J.P.  RANGASWAMI, 

MANAGING  DIRECTOR  OF 
SERVICE  DESIGN,  BT  DESIGN 


by  several  months,  says  Ramji. 

Although  telecommunications  com¬ 
panies  haven’t  historically  been  associ¬ 
ated  with  progressive  approaches  such 
as  agile  development,  BT’s  IT  organi¬ 
zation  needed  to  speed  up  its  system 
development  cycles  to  help  it  deliver 
new  mobile  telecommunications  and 
other  types  of  services. 

BT’s  shift  to  agile  development  also 
meant  that  its  3,000-person  global 
development  organization  would 
be  working  more  closely  with  users 
to  better  understand  and  meet  their 
needs.  This  was  especially  true  during 
the  requirements-gathering  stage,  says 
J.P.  Rangaswami,  managing  director  of 
service  design  at  BT  Design  in  London. 

CHANGING  MINDS 

BT’s  shift  from  traditional  waterfall 
development  techniques  to  an  agile  ap¬ 
proach  has  led  to  significant  productiv¬ 
ity  and  business  benefits,  but  it  didn’t 
happen  overnight,  nor  was  it  easy  for 
a  company  as  massive  and  widespread 


as  BT,  say  Ramji  and  Rangaswami. 

The  first  step  was  to  tweak  the  IT 
staff’s  skills  (see  box  on  previous  page). 
Then  the  company’s  IT  leaders  had  to 
break  through  some  misconceptions 
among  internal  and  external  business 
customers,  who  thought  that  “agile” 
meant  they  could  inject  new  require¬ 
ments  during  the  development  cycle  to 
suit  their  whims,  says  Ramji. 

Moreover,  although  the  company’s 
shift  to  agile  development  was  “more 
readily  accepted”  by  senior  executives 
and  junior  staffers,  middle  managers 
were  skeptical  about  how  it  might  af¬ 
fect  them,  Ramji  says. 

The  naysayers  included  IT  infra¬ 
structure  managers  who  had  gotten 
used  to  having  more  formal  documen¬ 
tation  for  new  software  or  enhance¬ 
ments  to  existing  systems,  says  Ran¬ 
gaswami. 

To  help  work  through  those  doubts, 
business  customers  were  invited  to 
BT’s  development  “hothouses”  to  see 
for  themselves  how  the  90-day  devel¬ 
opment  cycles  worked. 

The  company  also  had  to  change  its 
own  ideas  about  how  projects  should 
be  managed  and  executed,  according 
to  Rangaswami.  For  example,  a  quick, 
iterative,  agile  development  approach 
lends  itself  to  software  projects  involv¬ 
ing  geographically  dispersed  develop¬ 
ment  teams  —  located,  say,  in  both 
London  and  India.  This  enables  them 
to  “follow  the  sun”  and  work  around 
the  clock. 

Ramji,  Rangaswami  and  other  BT 


IT  leaders  had  to  convince  IT  manag¬ 
ers  and  staffers  that  agile  didn’t  neces¬ 
sarily  mean  they  were  de-emphasizing 
software  quality  assurance  and  testing. 

“Historically,  we  used  to  do  16  or  17 
different  types  of  tests”  before  a  sys¬ 
tem  was  put  into  production,  says  Ran¬ 
gaswami.  “Now,  we’ve  determined  that 
only  one  test  matters:  from  customer 
concept  to  completion.” 

So  BT  has  begun  tracking  new  met¬ 
rics  such  as  improvements  in  develop¬ 
ment  cycle  times  and  “right  first  time” 
features,  says  Rangaswami,  adding 
that  the  group  does  not  yet  have  met¬ 
rics  to  share. 

All  in  all,  BT’s  development  orga¬ 
nization  invested  less  than  $5  million 
to  launch  the  agile  initiative,  includ¬ 
ing  classroom  and  workshop  training 
for  its  developers.  Thanks  to  frequent 
interactions  with  BT’s  software  devel¬ 
opers,  other  BT  employees  and  even 
some  external  customers  have  become 
“complete  believers”  in  the  initia¬ 
tive.  “It  gives  them  far  better  control” 
in  project-development  efforts,  says 
Ramji. 

And  the  shift  to  agile  has  been  a 
boon  to  developers  like  Buckley.  Under 
the  old  waterfall  approach,  customer 
requirements  would  be  incorporated 
into  software  and  then  tested  with  us¬ 
ers  —  often  only  to  discover  that  “this 
isn’t  really  what  they  wanted,”  he  says. 
“The  main  advantage  I  see  [with  agile] 
is  that  you  spend  more  time  working 
on  the  right  [system]  features  by  talk¬ 
ing  to  customers  all  the  time.”  ■ 
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■  SECURITY  MANAGER’S  JOURNAL  C.J.  KELLY 


en  Taking  Time 
Off  Is  No  Vacation 


Family  obligations  run  up  against  a 
demanding  work  schedule.  Does  anyone 
have  advice  on  working  remotely? 


IF  YOU’VE  been  read¬ 
ing  this  column  over 
the  past  couple  of 
months,  you  know 
that  my  general 
theme  is  that  I  lack  the 
time,  money  and  resources 
to  get  everything  done  that 
I  need  to  do.  The  last  thing 
you  would  expect  to  hear 
from  me  is  that  I’m  taking 
time  off. 

In  three  and  a  half  years 
of  working  for  this  state 
agency,  I  haven’t  had  a  real 
vacation.  But  much  as  I'd 
love  to  spend  time  on  a 
warm  beach  somewhere,  I 
couldn’t  really  enjoy  that 
right  now.  I  would  be  too 
burdened  with  guilt  about 
how  much  work  I’d  be  leav¬ 
ing  my  staff  buried  in. 

No,  my  time-off  request 
was  prompted  by  some¬ 
thing  far  more  pressing 
than  the  need  for  a  break. 
My  dad,  an  honest-to-good- 
ness  rocket  scientist,  was 
diagnosed  a  year  ago  with 
“cognitive  impairment,” 
a  nice  way  of  saying  “Alz¬ 
heimer’s.”  Now  my  mom 
plans  to  move  them  across 
the  country  to  be  closer  to 
me.  It’s  a  big  undertaking, 
and  she  already  has  her 
hands  full  taking  care  of 
Dad.  She  needs  my  help. 


Of  course,  I  still  have  to 
maintain  the  security  in¬ 
frastructure.  Before  I  went 
on  leave,  I  worked  a  lot  of 
hours  trying  to  get  ahead 
on  my  project  schedule.  It’s 
amazing  what  you  can  do 
when  you  lock  yourself  up 
in  a  lab,  ignore  e-mail  and 
mute  the  cell  phone. 

In  fact,  by  the  time  I 
left,  I  had  managed  to 
get  two  months  ahead  of 
schedule.  With  no  time  for 
chit-chat,  I  condensed  my 
responses  to  questions  and 
requests,  even  from  my 
boss.  I  checked  voice  mail 
and  e-mail  when  I  woke  up 
each  morning,  in  the  mid¬ 
dle  of  the  day  and  when 
I  got  home.  If  a  message 
wasn’t  urgent,  I  ignored  it 
or  passed  it  along  to  some¬ 
one  on  my  staff. 

I  will  also  be  working 
remotely  from  my  parents’ 
home.  I’ve  never  had  a 
problem  burning  the  mid¬ 
night  oil,  and  Mom  and 
Dad  do  a  lot  of  sleeping. 

But  I  would  love  advice  on 
the  best  way  to  connect  to 

M  By  the  time  I 
Sett,  f  had  managed 
to  get  two  months 
ahead  of  schedule. 


our  security  labs. 

We  have  two  labs,  at 
opposite  ends  of  the  state. 
They’re  on  a  subnet  that’s 
separate  from  the  pro¬ 
duction  network.  I  work 
primarily  in  one  lab  and 
remotely  log  into  the  other, 
relying  on  a  tech  when 
something  has  to  be  rack¬ 
mounted,  physically  re¬ 
booted  or  moved.  This  has 
been  working  out  just  fine. 

REMOTE  CHANCES 

I  want  to  be  sure  that  I 
connect  to  the  labs  in  the 
most  secure  manner  when 
I’m  across  the  country.  I 
use  a  laptop  with  broad¬ 
band  wireless  and  access 
the  state  network  with  a 
Cisco  VPN  client.  I  use 
terminal  services  to  log 
into  my  computer  in  either 
security  lab  via  the  IP  ad¬ 
dress.  That  computer  will 
not  allow  anyone  else  to 
log  in,  with  the  exception 
of  a  domain  administrator. 

In  each  lab,  the  security 
gear  that  I’m  working  on 
is  connected  to  a  switch 
that  is  not  connected  to 
the  production  network. 
Each  computer  system 
from  which  I  manage 
these  devices  has  a  console 
connection  to  a  primary 


32  COMPUTERWORI.D  APRIL  28,  2008 


Trouble  ; 
Ticket  | 

AT  ISSUE:  A  family 
crisis  pulls  our  manager 
across  the  country. 

ACTION  PLAN:  Do  all 

she  can  before  she  goes, 
and  keep  connected 
while  away. 


security  device.  That  de¬ 
vice  is  connected  to  the  lab  l 
switch.  From  the  console 
connection  to  the  primary 
device,  I  can  access  the 
other  devices  on  the  pri¬ 
vate  LAN. 

I’ve  racked  my  brain,  but  j 
without  more  sophisticated  j 
technology,  this  is  the  only  j 
solution  I  can  come  up 
with.  I  know  there  are  a 
lot  of  Cisco  guys  out  there 
who  do  most  of  their  work 
remotely,  so  this  may  all 
sound  childish.  But  it’s  the  \ 
best  I  can  do  as  a  security 
manager  doubling  as  a  se¬ 
curity  engineer. 

The  other  task  at  hand 
while  I’m  away  is  to  hire  a 
security  engineer.  We’re 
using  a  Web-based  applica-  5 
tion  in  the  hiring  process, 
so  I  can  easily  manage 
applicants  from  afar  using 
e-mail  and  the  phone.  We 
were  recently  informed 
that  there  is  a  very  small 
hiring  window 
for  specific  open 
positions  —  a 
slight  reprieve 
from  our  hiring 
freeze  —  so  I 
can’t  let  this  op¬ 
portunity  slip  away.  Work 
and  family  obligations  are 
mounting,  and  I’ll  never  be 
able  to  keep  up  with  both 
of  them  if  we  don’t  get  an¬ 
other  staffer  on  board.  ■ 

This  week’s  journal  is  writ¬ 
ten  by  a  real  security  man¬ 
ager,  “C.J.  Kelly,”  whose 
name  and  employer  have 
been  disguised  for  obvious 
reasons.  Contact  her  at 
mscjkelly@yahoo.com. 


O  JOIN  IN 

To  join  the  discussion 
about  security,  go  to 

■  computerworld.com/ 
blogs/security. 
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OPINION 


,~Jm  JL 


The  Killer  in  the  ER 


THE  GOOD  news  is  that  you  look  better  than  your 
X-ray,”  the  doctor  says  in  a  joking  manner.  What’s 
the  bad  news,  I  ask?  “The  X-ray  shows  that  you  are 
in  the  end  stages  of  congestive  heart  failure.”  I  sit 
bolt  upright  on  the  gurney.  My  mind  races. 


I  am  47  years  old.  I  have 
a  wife  and  a  15-year-old 
daughter.  I  am  on  vaca¬ 
tion.  I  am  1,500  miles  from 
home.  I  have  come  into  the 
emergency  room  of  a  hos¬ 
pital  in  Punta  Gorda,  Fla., 
because  I  thought  I  had 
bronchitis.  I  am  dying. 

It  is  7  a.m. 

The  preliminary  diagno¬ 
sis  was  made  by  a  doctor 
who,  even  in  an  emergen¬ 
cy,  had  no  access  to  any 
of  my  health  records 
—  allergies,  medications, 
known  medical  problems, 
or  radiology  and  lab  re¬ 
sults  —  in  shaping  his 
diagnosis.  All  of  that  in¬ 
formation  exists  in  digital 
form,  locked  away  in  my 
primary  care  provider’s 
systems  in  Keene,  N.H. 

There’s  a  flurry  of  data- 
gathering  activity.  A  nurse 
begins  building  a  chart  for 
me  on  the  fly,  filling  in  the 
blanks.  Do  you  smoke?  Do 
you  have  a  family  history 
of  heart  disease?  Another 
begins  covering  my  body 
with  electrodes  and  hooks 
me  up  to  an  electrocar¬ 
diogram.  An  intravenous 
drip  goes  into  one  arm. 
Copious  amounts  of  blood 
are  pulled  from  the  other 
for  lab  work.  In  the  ensu¬ 


ing  chaos,  the  needle  in 
my  arm  blows  out.  Blood 
spurts  across  my  shirt.  I 
feel  a  wet  washcloth  on 
my  forehead,  and  as  they 
wheel  me  back  to  X-ray,  I 
begin  to  faint. 

At  10  a.m.,  the  doctor 
returns  with  “good”  news. 

I  don’t  have  congestive 
heart  failure  after  all.  I 
happily  accept  my  new  di¬ 
agnosis  of  bronchitis,  take 
my  prescription  and  return 
to  my  family,  happy  to  be 
alive. 

The  medical  data  that 
might  have  saved  me  sev¬ 
eral  hours  of  terror  sat 
unused.  It  was  unavailable 
to  doctors  outside  of 
Dartmouth-Hitchcock’s 
Keene  clinic,  except  by 
mail  or  fax.  And  even  if 
the  clinic  could  transmit 
my  records,  Charlotte 
Regional  Medical  Center’s 
systems  were  incapable  of 
receiving  them.  According 

■  The  preliminary 
diagnosis  was 
made  by  a  doctor 
who,  even  in  an 
emergency,  had  no 
access  to  any  of 
my  health  records. 


to  its  records  department, 
the  hospital  still  uses 
paper-based  processes  for 
its  medical  records. 

Standards  that  could 
have  helped  solve  these 
problems  have  been  avail¬ 
able  since  1991.  But  17 
years  later,  the  industry 
still  doesn’t  follow  them. 
Health  care  providers  and 
systems  vendors  haven’t 
agreed  on  any  unique  pa¬ 
tient  identification  codes, 
universal  schemas  or 
global  XML  data  models. 
Moreover,  they  have  no 
real  incentives  to  pursue 
them.  Providers  see  no  di¬ 
rect  economic  benefit  from 
adopting  interoperable 
electronic  health  records. 
For  vendors,  open  stan¬ 
dards  threaten  services 
revenue  and  lower  barriers 
to  competition. 

Issues  arising  from 
badly  designed  and  poorly 
integrated  health  care  IT 
systems  harm  or  kill  more 
patients  every  year  than  do 
medications  and  medical 
devices,  says  Asif  Ahmad, 
CIO  at  Duke  University 
Health  System.  Yet  there’s 
absolutely  no  control  or 
regulation  over  them. 

Until  something  changes, 
the  onus  is  on  the  patient 


to  take  responsibility.  Un¬ 
der  HIPAA,  I  have  a  right 
to  a  copy  of  my  health 
records.  But  the  data  needs 
to  live  online,  where  it’s  ac¬ 
cessible,  not  in  my  suitcase 
or  in  a  sheaf  of  papers. 

A  few  providers  of¬ 
fer  access  to  a  limited  set 
of  health  records  via  the 
Web.  Another  approach  is 
to  entrust  it  to  an  organi¬ 
zation  such  as  Dossia,  an 
employer-funded  nonprofit 
that  is  piloting  a  secure, 
Web-accessible,  privacy- 
protected  and  entirely 
user-controlled  repository 
for  personal  health  care 
data.  That  data,  says  Dos¬ 
sia  President  Colin  Evans, 
is  currently  “scattered 
across  Hell’s  half  acre,”  in 
primary  care,  specialist, 
pharmacy,  payer  and  other 
repositories. 

Evans  envisions  a  “break 
glass,  pull  handle”  feature 
that  would  let  me  preau¬ 
thorize  qualified  emer¬ 
gency-room  physicians 
to  access  all  or  part  of  my 
Dossia  health  record  in 
an  emergency.  If  I  arrived 
in  the  ER  with  a  bracelet 
or  card  with  a  Dossia 
ID  number,  the  hospital 
could  use  that  number 
in  conjunction  with  its 
unique  authentication 
code  to  gain  access. 

It’s  not  a  perfect  plan. 
But  it’s  a  hell  of  a  lot  better 
than  what  the  remote  ER 
has  to  work  with  today, 
which,  more  often  than 
not,  is  nothing  at  all.  * 
Robert  L.  Mitchell  is  a 
Computerworld  national 
correspondent.  Contact  him 
at  Robert_Mitchell@ 
computerworld.com. 
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♦  API  supports  .NET,  C++, 
Java,  databases,  etc. 
New  .NET  Spider  API 


The  Smart  Choice  for  Text  Retrieval®  since  1991 


♦  "Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a 
single  index  and  returns  results  in  less  than  a  second" 

-  InfoWorld 

♦  "For  combing  through  large  amounts  of  data,"  dtSearch 
"leads  the  market"  -  Network  Computing 

♦  dtSearch  "covers  all  data  sources  ...  powerful  Web-based 
engines"  -  eWEEK 

♦  dtSearch  "searches  at  blazing  speeds"  -  Computer  Reseller 

News  Test  Center 

See  www.dtsearch.com  for  hundreds  more  reviews, 
and  hundreds  of  developer  case  studies 


Contact  dtSearch  for  fully-functional  evaluations 
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Instantly  Search 
Terabytes  of  Text 
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♦  dozens  of  indexed, 
unindexed,  fielded  data 
and  full-text  search 
options  (including 
Unicode  support  for 
hundreds  of 

international  languages) 

♦  file  parsers  /  converters 
for  hit-highlighted 
display  of  all  popular 
file  types 
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♦  Spider  supports  static 
and  dynamic  web  data; 
highlights  hits  while 
displaying  links, 
formatting  and  images 
intact 
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How  Green 

g.  IT.  Really? 


Faronics  Power  Save  delivers  intelligent  energy 
management  to  desktop  computers.  Power 
Save  goes  above  and  beyond  every  computer’s 
basic  power  settings  by  implementing  energy 
management  based  on  CPU,  disk,  and 
application  activity— without  impacting  user 
productivity. 


Faronics 

Intelligent  Solutions  for  Control 


■  y  Download  a  free,  fully 
m  functional  evaluation  copy  at 

www.faronics.com/Green  I T 

Fo.r/pore  Information  call  us  at  1-800-943-6422 ) 
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■  Q&A 

Donna 
Walters 
Kozberg 

The  president  of 
Lift  Inc.  talks  about  how  the 
organization  helps  professionals 
who  are  disabled  gain  IT  careers. 


Has  the  demand  for  Lift- 
trained  IT  professionals 
changed  over  the  years? 

We’ve  been  training,  hiring  and 
placing  IT  professionals  who 
have  physical  disabilities  since 
1975.  In  the  mid-’70s,  there  was 
huge  demand  for  entry-level 
programmer-analysts.  We 
recruited  candidates  who  had 
exceptional  analytical  ability 
and  typically  little  or  no  back¬ 
ground  and  trained  them  to 
program  in  assembler,  Cobol, 
Fortran,  etc.  Today  we’re  placing 
consultants  and  employees  who 
have  disabilities  in  specialties 
ranging  from  Web  development 
to  technical  writing  to  computer 
security  to  tech  support.  Most 
have  prior  technical  or  business 
experience  and/or  degrees  in 
relevant  fields  from  leading 
universities. 

Do  the  companies  you 
work  with  suggest  par¬ 
ticular  areas  of  training  or 
methods  of  instruction? 

Every  employee’s  program  with 
Lift  is  individualized.  We  recruit 
applicants  only  for  specific  posi¬ 


tions  identified  by  our  corporate 
clients.  Curricula  and  methods 
of  instruction  vary  with  skill-set 
requirements,  accommodation 
needs  and  candidates’  back¬ 
grounds. 

Who  conducts  the  Lift 
training?  Where  is  it  done? 

Training  typically  consists  of  a 
combination  of  online  mentored 
instruction  in  both  technical  and 
business  skills,  and  on-the-job 
programs  at  client  sites.  Pre¬ 
employment  training  usually 
takes  place  at  home,  with  multi¬ 
resource  curricula  developed  by 
Lift  and  approved  by  the  client, 
and  it  is  always  rigorous. 

Are  clients  optimistic 
about  their  employment 
prospects?  Everyone  ac¬ 
cepted  into  the  Lift  program  is 
assigned  to  a  yearlong  contract 
with  a  corporate  client,  with  the 
end  goal  of  direct  employment 
with  that  client.  Because  of 
the  outstanding  track  record 
of  participants,  those  who  are 
accepted  into  the  program  are 
extremely  optimistic. 

-JAMIE  ECKLE 
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That  is,  I  will  be  leaving  my 
current  position  in  six  to 
eight  weeks,  depending  on 
the  governing  statutes. 


-.VWJ 


Human  resources  consultancy  Mercer  LLC  studied  43  nations  and 
found  that  the  U.S.  and  Mexico  are  alone  in  having  no  statutory  notice 
period  for  leaving  an  employer.  Most  countries  require  advance  notice 
of  a  month  or  so,  though  they  also  tend  to  require  companies  to  give 
an  equal  amount  of  notice  before  laying  employees  off.  The  countries 
with  the  longest  required  notice  periods  are  Switzerland,  Slovakia  and 
the  Czech  Republic,  where  two  months’  notice  is  required.  Mercer 
dug  these  factoids  up  for  its  2007  Global  HR  Factbook. 


Now,  Why  Would  She  Want  a  Career  in  IT? 


A  detailed  UC  Davis  study  of  women  at  the  top  in  the  400  largest 
publicly  held  corporations  in  California  shows  that  they  are  few  and 
far  between.  The  study,  “A  Census  of  Women  Directors  and  Execu¬ 
tive  Officers,”  which  covers  the  period  from  July  2006  to  June  2007, 
paints  a  particularly  dismal  picture  of  life  in  the  technology  industry. 

SOME  KEY  FINDINGS:  \  top  executive  positions  or  on 

■Women  hold  only  10.4%  of  !  the  board  of  directors, 
the  board  seats  and  highest-  j  ■  387  of  the  400  corn- 
paid  executive  officer  posi-  j  parties  have  male  CEOs, 
tions  (including  but  not  limited  J  ■  The  telecommunications 
to  CEO,  COO,  CFO  and  CIO).  \  sector  has  the  lowest  percent- 

■  199  of  the  400  compa-  j  age  of  women  directors,  with 
nies  have  no  women  among  j  3.2%. 

their  executive  officers.  *  ■  The  electronics  sector  has 

■  188  have  no  women  in  the  J  the  lowest  percentage  of 

boardroom.  «  women  executive  officers, 

■  122  have  no  women  in  any  !  with  2.9%. 


SOURCE:  UNIVERSITY  OF  CALIFORNIA,  DAVIS 

And  the  2006  Catalyst  Census  isn’t  much  more  optimistic: 
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corporations. 

corporations. 

SOURCE:  CATALYST  CENSUS.  2006 
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Diversity  Report:  Leaders  Focus  on  Attracting 
Students,  Cultivating  Diverse  Work  Environment 


Two  decades  ago,  the  term  Corporate  Diversity  equated  to 
awareness  training,  workshops,  and  attracting  more  people  of 
varied  backgrounds  and  ethnicities  to  the  workforce.  As  the 
information  technology  industry  nears  the  end  of  the  first 
decade  of  the  21st  century,  it  faces  a  multitude  of  diversity 
issues  -  but  they  reach  well  beyond  balancing  the  number  of 
diverse  employees. 

Top  among  the  issues  today  is  attracting  the  best  and 
brightest  workers  -  without  regard  to  background,  ethnicity, 
age  or  gender.  There’s  a  proclaimed 
shortage  of  technology  workers  in  the 
United  States,  despite  outsourcing  and 
offshoring.  At  issue  is  the  ability  to 
encourage  young  people  to  study 
science,  technology,  engineering  and 
mathematics  subjects  (STEM). 

Programs  abound,  from  the  process 
model  put  forth  by  Battelle  Institute  for 
K-12  education  to  the  individual  efforts 
of  IT  companies  from  coast  to  coast. 

Tyrone  Taborn,  founder  and  chief 
executive  officer  of  Career 
Communications  Group,  which 
publishes  Black  Engineer  and  a  host  of 
other  ethnicity-based  magazines,  last 
conducted  his  diversity  survey  and 
report  for  technology  workers  in  2006.  This  fact  alone  is  a 
hallmark  of  the  current  era  -  associations  are  reporting  less 
about  diversity  and  instead  focusing  on  creating  a  workplace 
environment  that  respects  and  embraces  diversity  -  in  terms  of 
ethnicity  and  gender,  but  also  increasingly  on  the  basis  of  a 
workforce  that  spans  four  generations.  That’s  the  widest  age  gap 
ever,  and  it  brings  about  a  variety  of  new  work  requirements. 

Taborn’s  mantra  now  focuses  on  workplace  issues  - 
conflict,  lack  of  professional  recognition  among  women  and 
people  of  color,  minority  leadership  development  and 
retention.  His  mention  of  workplace  conflict  is  not  just  an 
impression.  Studies  this  year  indicate  an  increase  in  crude 
language  and  behavior  in  the  workplace,  as  well  as  reports  of 
senior  leaders  losing  their  jobs  for  not  responding  quickly 
enough  to  conflicts  arising  from  diversity  in  the  workplace. 


Better  than  85%  of  the  employees  in  the  study  reported 
employers  have  a  confidential  process  for  employees  to  report 
gender  or  racial  discrimination  occurrences. 

Taborn’s  work  also  found  that  recognition  for 
innovation  and  hard  work  is  viewed  as  being  higher  among 
technology  workers  than  among  non-technical  employees. 
Respondents  in  his  study  said  employers  have  programs  in 
place  to  create  a  sense  of  belonging  -  networks,  affinity 
groups  and  mentoring. 

Professional  development  remains 
a  key  differentiator  for  companies  that 
successfully  value  diversity.  According 
to  the  Information  Technology  Senior 
Management  Forum,  fewer  than  3%  of 
senior  IT  professionals  are  African- 
American.  Computerworld’s  2007 
salary  survey  reflects  the  same  data 
point  with  3%  of  respondents  listing 
themselves  as  African-American. 
Informal  and  formal  mentoring 
programs  are  necessary  to  push  this 
number  upward. 

So  what  are  the  challenges  for 
the  future  of  valuing  diversity? 
The  list  is  short: 

•  Assuring  youth,  regardless  of  socio¬ 
economic  background,  understand  opportunities  in  the 
technical  fields  and  can  pursue  studies  in  those  fields. 

•  “Nurturing  productivity,  innovation  and  harmony  in  that 
workforce”  by  helping  employees  understand  how  to  resolve 
conflict  and  how  to  deal  effectively  with  situations  as  they  arise. 

•  Employers  must  continue  to  move  beyond  static  data  points 
on  awareness  training  or  workforce  demographics;  the  hard 
work  is  in  seeking  and  identifying  creative  ways  to 
continuously  build  a  “value  proposition”  for  valuing  and 
respecting  individuals. 

For  more  information  about  IT  Careers  advertising, 
please  call:  800.762.2977 

Produced  by  Carole  R.  Hedden 
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COMPIFTERWORLD 

Law  Firms 
IT  Consultants 
Staffing 
Agencies 

Place 

your  Labor 
Certification 
Ads  here! 

Are  you 
frequently 
placing  legal  or 
immigration 
advertisements? 

Let  us 
help  you 
put  together 
a  cost  effective 
program  that 
will  make  this 
time-consuming 
task  a  little 
easier. 


Contact  us  at: 

800.762.2977 
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COMPUTER-  Programmer  Analysts: 

Growing  IT  firm  has  multiple  per¬ 
manent  positions  for  Programmer 
Analysts  to  analyze,  design, 
develop  computer  applies.  DB 
and  Sys  design,  development, 
administration  and  modeling. 
Documentation  of  programs,  cre¬ 
ation  of  test  data,  test  scripts  and 
execution  of  test  scripts. 
Experience  with  1/more  skill  sets 
.Net  Development,  Java,  JSP, 
SQL,  PL/SQL,  SAP,  ABAP/4, 
DB2,  C,  C++,  VB,  J2EE,  ASP, 
Load  Runner,  Win  Runner,  Test 
Director.  Must  have  MS/BS  in  CS 
or  related  field  w/1-5  yrs  exp.  Any 
reasonable  combo  of  education, 
training  &  exp  is  acceptable  for 
position  offd.  Job  Iocs  in 
Princeton  Junction,  NJ  and  other 
unanticipated  Iocs  w/in  US. 
Travel  and  Relocation  Possible. 
Send  resume  to  HR  Dept, 
Friendly  Consultants,  Inc.  55 
Princeton-Hightstown  Road,  Ste 
205B,  Princeton  Junction,  NJ 
08550;  Reference  PROGR;  or 
email  to  hrd@friendlyconsul- 
tants.com 


Corporate  Computer  Services 
(CCS)  seeks  System/ 
Programmer  Analysts,  DBA, 
S/W  Engineers  using  skills 
C/C++,  VB,  Oracle,  etc.  Min 
MS/BS+1-5yr  IT  exp.  Job  site 
various.  Apply  HR@ccsiusa.net. 
EOE. 

IT  professionals  (DBA,  analysts, 
software  engineers)  wanted  by 
Advanced  Technology  Group  to 
design  applications  using  Java, 
Oracle,  SQL,  HTML,  WebLogic, 
VB,  etc.  Min.  is  MS  or  BS  with 
exp.  Job  sites  various.  Send 
resume  to  info@atgusainc.com. 
EOE 


At  Coventry,  we're  very  proud  of  our  commitment  to  excellence  and  are  looking  for 
top-tier  Technical  professionals  to  bring  their  talents  to  our  growing  organization.  We  are 
a  proven  leader  in  managed  care  and  a  multi-billion  dollar  company  with  over  15,000 
employees.  And  right  now,  we  have  a  variety  of  dynamic  opportunities  for  IT  professionals. 

When  you  join  Coventry,  you  will  be  working  with  a  company  that  has  been  named  to: 

Barron’s  500  -  Fortune  500  -  Forbes  Platinum  400  -  BusinessWeek  50 

As  an  IT  professional  with  Coventry,  you'll  be  rewarded  by  a  company  whose  strong  financial 
base  will  continue  to  lead  to  tremendous  growth  opportunities  and  the  chance  to  work  with 
emerging  technologies.  For  more  information,  visit:  careers.cvty.com 


Coventry  Health  Care  is  a  diversified  national  managed 
healthcare  company  based  in  Bethesda,  Maryland,  operating 
health  plans,  insurance  companies,  network  rental  and 
workers'  compensation  services  companies.  Through  its 
Commercial  Business,  Individual  Consumer  &  Government 
Business,  and  Specialty  Business  divisions,  Coventry 
provides  a  full  range  of  risk  and  fee-based  managed  care 
products  and  services  to  a  broad  cross-section  of  individuals, 
employer  and  government-funded  groups,  government 
agencies,  and  other  insurance  carriers  and  administrators. 
EOE  MIFIDIV 
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Health  Care 


Computer  Professional  (  Iselin, 
NJ)  IT  firm,  Jr.  Lvl  positions 
Programmer  Analysts,  S/w  Eng, 
Sys  Analysts,  Business  Analyst,  to 
develop,  create, &  modify  general 
comp,  applications  s/w  or  special¬ 
ized  utility  programs.  Analyze  user 
needs  &  develop  S/w  solutions. 

Sr.  Lvl  position,  IT  Mgr,  MIS  Mgr, 
ITS  Director  to  plan,  direct,  or 
coordinate  activities  in  such  fields 
as  electronic  data  processing, 
information  systems,  systems 
analysis,  Business  analysis  & 
comp,  programming.  Apply  w/2 
copies  of  resume  to  H.R.D, 
Software  Research  Group  Inc., 
485E  Route  1  South,  #240,  Iselin, 
NJ  08830. 


Viraj,  LLC  seeks  software  engi¬ 
neers,  system  analysts,  DBA  to 
customize  applications  using 
specials  tools,  JavaScript,  VB, 
XML,  DB2,  Oracle,  etc.  Jobsite 
various.  Require  MS  or  BS  with 
1-5  exp.  Please  send  resume  to 
hr@viraj.com 

Sigma  Tech  seeks  system  ana¬ 
lysts/engineers  to  customize 
applications  using  VB,  Oracle, 
Java,  Jscript,  JSP,  JavaBean, 
etc.  Require  BS  with  1-5  year 
related  experience.  Send 
resumes  to  6200  Schaefer  Rd. 
Dearborn,  Ml  48126 


Senior  Data  Analyst.  Create 
d/bases  &  construct  data  sets  to 
generate  fin'l  info.  Req's  incl 
Master's  (or  equiv)  in  Comp  Sci 
or  related  &  working  knowl  of 
analyzing  bus.  processes  & 
constructing  reports  from  large 
data  sets  using  SQL,  SAS  & 
OLTP  d/bases  incl.  Oracle  & 
SQL  Server.  Resume  to:  Collect 
America,  Ltd.,  4340  S.  Monaco 
St,  Denver,  CO  80237  Attn: 
Debbie  Finn,  refer  to  job  #60W 


Technical  Lead,  Quality 
Assurance  -  Manage,  lead  &  per¬ 
form  complex  testing  tasks  inclu¬ 
sive  of  planning  &  scheduling  to 
assure  that  dvlp'd  products  meet 
dsgn  specs  &  are  w/in  quality 
mgmt  limits  &  stds,  to  work  in 
Mountain  View,  CA.  Reqmts  incl 
Master's  or  equiv  in  Comp  Sci, 
Electrical  Engg  or  related;  & 
working  knowl  of  Malware  foren¬ 
sics  &  corresponding  test  meth¬ 
ods,  Automation  Tools,  API  vali¬ 
dation  test,  Code  coverage  analy¬ 
sis  tools  &  Windows-based/C++ 
performance  profiling.  Resume 
to;  HR-AM,  Webroot  Software, 
2560  55th  St.,  Boulder,  CO 
80301. 
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Software  Engineers 

Growing  IT  firm  has  multiple  per¬ 
manent  positions  for  Software 
Engineers  to  research,  design, 
develop  computer  applies  in 
conjunction  with  hardware  prod¬ 
uct  development.  DB  and  Sys 
design,  development,  adminis¬ 
tration  and  modeling. 
Documentation  of  programs, 
creation  of  test  data,  test  scripts 
and  execution  of  test  scripts. 
Experience  1/more  skill  sets 
.Net  Development,  Java,  JSP, 
SQL,  PL/SQL,  C,  C  ++,  VB, 
J2EE,  ASP,  Load  Runner,  Win 
Runner,  Test  Director.  Must  have 
MS/BS  in  CS  or  related  field 
w/1-5  yrs  exp.  Any  reasonable 
combo  of  education,  training  & 
exp  acceptable  for  position  offd. 
Job  Iocs  in  Princeton  Junction, 
NJ  and  other  unanticipated  Iocs 
w/in  US.  Travel  and  Relocation 
Possible.  Send  resume  to  HR 
Dept,  Friendly  Consultants,  Inc. 
55  Princeton-Hightstown  Road, 
Ste  205B,  Princeton  Junction, 
NJ  08550;  Reference  SOFT- 
ENG;  or  email  to  hrd@friendly- 
consultants.com 


Legal  Analyst 

Growing  IT  firm  has  opening  for 
permanent  position  of  Legal 
Research  Analyst  to  review,  pre¬ 
pare,  and  negotiate  contracts  w / 
existing  international  clients, 
employees  and  business  matters. 
Will  prepare,  review  and  advise 
regarding  law  and  govt  agencies 
in  India.  Preparation  and  appear¬ 
ance  before  courts  in  India  may 
be  required.  Must  have 
BA/Masters  in  Law  or  related  field 
(or  foreign  equiv.)  and  min.  2 
years  experience  as  legal  consul¬ 
tant/attorney/clerk  in  US  or  India. 
Any  reasonable  combo  of  educa¬ 
tion,  training  &  exp  acceptable  for 
position  offd.  Job  loc  in  Princeton 
Junction,  NJ.  Travel  Possible. 
Send  resume  to  HR  Dept, 
Friendly  Consultants,  Inc.  55 
Princeton-Hightstown  Road,  Ste 
205B,  Princeton  Junction,  NJ 
08550;  Reference  LEGAL;  or 
email  to  hrd@friendlyconsul- 
tants.com 


Security  Research  Analyst  - 
Research  Spyware/Malware 
threats  to  work  in  Mountain 
View,  CA.  Reqmts  incl 
Bachelor's  in  Comp  Sci,  IT, 
Engg  or  related,  2  yrs  exp  in 
job  offd  &  working  knowl  of 
OllyDbg,  IDA  Pro,  SoftICe, 
Hiew,  WireShark  &  Assembly 
80x86.  Resume  to:  HR-PC, 
Webroot  Software,  2560  55th 
St,  Boulder,  CO  80301. 


COMPUTER - 
SAS  Analyst/  Developer 

Growing  IT  firm  has  multiple  per¬ 
manent  positions  for  SAS 
Analyst/Developer  to  analyze, 
design  and  develop  SAS-based 
applications,  provide  source 
code  and  supporting  documen¬ 
tation.  Experience  with  1/more 
skill  sets  of  SAS/BASE,  SAS, 
Analyst,  SAS/Macros,  SQL, 
SPSS,  Oracle,  C,  C++.  Must 
have  MS/BS  in  CS  or  related 
field  w/1-5  yrs  exp.  Any  reason¬ 
able  combo  of  education,  train¬ 
ing  &  exp  acceptable  for  position 
offd.  Job  Iocs  in  Princeton 
Junction,  NJ  and  other  unantici¬ 
pated  Iocs  w/in  US.  Travel  and 
Relocation  Possible.  Send 
resume  to  HR  Dept,  Friendly 
Consultants,  Inc.  55  Princeton- 
Hightstown  Road,  Ste  205B, 
Princeton  Junction,  NJ  08550; 
Reference  SAS;  or  email  to 
hrd@friendlyconsultants.com 


SAP  Consultants,  Hoffman 
Estates,  IL:  2  openings:  Vistex, 
Inc.  a  software  product  develop¬ 
ment/consulting  company  has 
openings  for  expd  professionals 
to  coordinate  analysis  of  busi¬ 
ness  requirements,  procedures  & 
problems  for  customizing  SAP 
packages.  Review  Rebate 
Agreements,  Chargeback  & 
Billback  processes  to  implement 
existing  legacy  system  capabili¬ 
ties,  workflow  using  Sales  & 
Distribution,  Materials 

Management  &  Finance/ 
Controlling  modules.  Enhance 
the  standard  delivered  SAP  sys¬ 
tem  using  ABAP  programming, 
BADI,  BAPI,  User  Exits. 
Integrated/enterprise  wide  func¬ 
tionality  &  carry  out  configuration 
changes  &  full  life  cycle  project 
implementation  using  SAP 
Queries  &  Business  Intelligence 
for  Reporting.  We  offer  competi¬ 
tive  salaries.  For  immediate  con¬ 
sideration  send  resume  to  Vistex, 
Inc.,  2300  Barrington  Road,  Suite 
#550,  Hoffman  Estates,  IL  60169 


Valex  Consulting,  Inc.  of 
Holland,  PA  seeks 
Business  Systems  Analyst 
with  M.S.  in  CE  or  related 
&  1  yr  exp  in  job  or  as  pro¬ 
grammer,  designing  soft¬ 
ware  for  medical  industry. 
Send  res;  vconsult- 
ing2006@yahoo.com. 


IT-  Systems  Analyst  (or  QA  Analyst) 

Growing  IT  firm  has  multiple  per¬ 
manent  positions  for  Systems 
Analyst  to  research,  analyze, 
develop,  modify  complex  pro¬ 
grams,  test  and  resolve  prob¬ 
lems.  Documentation  of  pro¬ 
grams,  creation  of  test  data,  test 
scripts  and  execution  of  test 
scripts.  Experience  with  1/more 
skill  sets  Oracle,  SQL,  C,  C++, 
Rational  Analysis  Studio,  Test 
Director,  HTML,  XML,  Javascript, 
Win  Runner,  Crystal  Reports. 
Must  have  MS/BS  in  CS  or  relat¬ 
ed  field  w/1-5  yrs  exp.  Any  rea¬ 
sonable  combo  of  education, 
training  &  exp  acceptable  for 
position  offd.  Job  Iocs  in 
Princeton  Junction,  NJ  and  other 
unanticipated  Iocs  w/in  US. 
Travel  and  Relocation  Possible. 
Send  resume  to  HR  Dept, 
Friendly  Consultants,  Inc.  55 
Princeton-Hightstown  Road,  Ste 
205B,  Princeton  Junction,  NJ 
08550;  Reference  SYS/QA;  or 
email  to  hrd@friendlyconsul- 
tants.com 

Maxpro  seeks  IT  Analyst,  DBA, 
SA/V  engineer  to  design  applica¬ 
tions  using  various  tools  per  pro¬ 
ject  requirements.  Min  MS/BS 
with  1-5yr  IT  experience.  Travel 
required.  Apply  at 

waseem@maxprous.com.  EOE 

IT  Analyst,  DBA  wanted  by 
ARWANO,  Inc.  for  positions 
using  Oracle,  SQL,  VB,  C/C++, 
SAP,  AS/400,  RPGLE,  Oracle. 
Min  MS/BS  with  1-5yr  IT  experi¬ 
ence.  Travel  required.  Apply  at 
waseem@arwano.com.  EOE 

Systems  Analyst.  Provide 
consult,  on  Oracle  Tech., 
backup,  recovery,  tuning, 
Unix,  Solaris,  HP,  AIX, 
Linux,  Shell  scripting, 
patching.  Req.  Bachelor’s 
of  Electronics  Sys.  Eng.  or 
CS  w/2  yrs.  exp.  Jeem 
Solutions,  Fax  resume  to 
773-304-1956;  Work  in 
Waukegan,  IL 

Database  Design  Analyst. 
Design  data  bases  to 
remotely  monitor  EKG 
which  transmits  to  hand 
held  device.  Develop  wire¬ 
less  systems  to  fit  pace¬ 
maker.  Req.  MCS  w/6 
mths.  exp.  Cardiac 
Diagnostics,  Fax  resume  to 
847-537-6005;  Worksite: 
Northbrook,  IL 


Co-Branded 

EMAIL 

BLASTS 


Reach  your  target  audience 
of  professional  IT  job  seek¬ 
ers  with  Computerworld’s 
Co-Branded  Email  Blasts. 
This  unique  program  allows 
you  to  choose  your  criteria 
of  1 00%  opt-in  subscribers 
by  geography,  company 
size,  job  title  and  industry. 

Call  Laura  Wilkinson  at 
800-762-2977  for  details! 
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Shark  lank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Who  Says  Nobody 
Listens  to  IT? 

Pilot  fish  is  assigned  to 
install  an  application  on 
a  secretary’s  machine,  so 
he  calls  to  see  if  the  user  is 
at  her  desk.  “She  didn’t  an¬ 
swer  the  phone,  and  it  rolled 
to  the  next  secretary,  who  sits 
right  across  from  her,”  fish 
says.  “I  asked  if  the  person 
was  anywhere  close  to  her 
desk  and  was  told  that  she 
had  stepped  out  for  a  minute. 

I  asked  if  the  secretary’s 
screen  was  locked,  and  she 
told  me  no.  I  asked  her  to 
please  move  the  mouse  so 
that  the  screen  saver  would 
not  kick  in  and  lock  the  screen 
before  I  got  there.  I  got  off  the 
phone  with  her  and  then  took 
another  call.  About  five  min¬ 


utes  later,  I  was  able  to  go  to 
the  user’s  machine.  The  sec¬ 
retary  I  had  talked  to  on  the 
phone  was  sitting  there  -  still 
moving  the  mouse  around  so 
the  screen  wouldn’t  lock.” 

Half  Right 

User  comes  to  pilot  fish  with 
100  pages  of  hard  copy  that 
need  to  be  e-mailed  to  a  cli¬ 
ent.  Fish  explains  how  to  use 
the  copier/scanner  to  auto¬ 
matically  create  PDF  files, 
but  he  points  out  that  the 
resulting  file  may  be  too  huge 
to  e-mail  successfully  and 
suggests  splitting  the  material 
into  two  files  attached  to  two 
e-mail  messages.  “I  tell  him 
to  let  me  review  it  before  he 
sends  it,”  says  fish.  “Result¬ 
ing  file  is  9MB,  too  big  for 


most  e-mail  systems.  I  split 
it  into  two  files  and  tell  the 
user  where  the  files  are  so  he 
can  send  his  e-mails.  About 
an  hour  later,  user  stops  by 
to  tell  me  that  the  files  didn’t 
go  through.  The  recipient’s 
e-mail  server  rejected  it  be¬ 
cause  it  was  too  big.  Yes,  he 
attached  both  of  them  to  the 
same  e-mail.” 

Oops! 

While  visiting  his  tax  con¬ 
sultant,  this  pilot  fish  needs 
some  information,  and  he 
has  to  get  onto  the  Internet 
to  find  it.  No  problem  -  he 
fires  up  his  laptop  and  con¬ 
nects  to  the  first  unsecured 
wireless  network  he  finds. 
“Then  I  realized  that  the  con¬ 
nection  I  was  using  was  also 
the  strongest  one  in  the  list, 
and  thus  most  likely  that  of 
my  tax  consultant,”  says  fish. 
“Upon  further  investigation, 

I  found  that  not  only  was  the 
router  not  secured,  but  the 
administrative  username  and 
password  were  still  set  to  the 


defaults.  After  logging  in  and 
viewing  the  DHCP  table,  I  was 
able  to  connect  to  her  com¬ 
puter  and  see  all  her  files  on 
both  her  and  her  husband’s 
business  PCs.  We  also  noted 
that  there  were  two  additional 
people  she  didn’t  recognize 
who  had  been  using  her  Wi-Fi  * 
connection.  She  was  baffled 
until  she  remembered  that 
her  local  cable  company  had 
replaced  her  faulty  router 
three  months  prior  -  leaving 
her  business  data  totally 
vulnerable.” 

■  Don’t  leave  Sharky  totally 
vulnerable.  Send  me  your  true  j 
tale  of  IT  life  at  sharky  @ 
computerworld.com.  You’ll  get  \ 
a  stylish  Shark  shirt  if  I  use  it. 
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0  NEED  TO  VENT  YOUR  SPLEEN? 

Toss  some  chum  into 

the  roiling  waters  of 

Shark  Bait.  It's  therapeutic! 

sharkbait.computerworld.com. 

0  CHECK  OUT  Sharky’s  blog,  browse  the 

■  Sharkives  and  sign  up  for  Shark  Tank  home  . 

deliveryatcomputerworld.com/sharky 
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Accordent  Technologies  Inc . 26 

American  Wind  Energy  Association . 11 

AMR  Research  Inc . 13 

Armenian  Association  of 

Pediatric  Professionals . 26 
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Catalyst  Inc . 35 

Charlotte  Regional  Medical  Center . 33 

Cisco  Systems  Inc . 32 

Computer  Sciences  Corp . 11 
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EarthLink  Inc . 10 
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Forrester  Research  Inc . 12 
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Harvard  Business  School . 35 
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dtSearch . 

www.dtsearch.com 
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Hewlett-Packard . 

www.exstream.com/hpsynergy 

IBM  Express  Seller . 

ibm.com/systems/uptime 

IBM  IT  Campaign . 

ibm.com/takebackcontrol/portal 

IBM  IT  Campaign . 

ibm.com/takebackcontroi/connect 

IBM  IT  Campaign . 

ibm.com/takebackcontrol/vtsibte 

InterSystems . 

lnterSystems.com/Connect12A 

Invest  in  Ontario . 

nextgenjobs.ca 

ITWatchDoqs . 
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Microsoft  Forefront . 
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IBM  System  x3550™  Express.  It’s  designed  to  stay  up  and 
running  and  help  reduce  system  downtime.  In  fact,  it  can 
even  identify  a  potential  problem  before  it  becomes  one. 
And  if  you  ever  have  to  replace  a  component,  you  can  do 
that  without  having  to  shut  down.  Just  one  more  way  the 
x3550  Express  keeps  downtime  down. 

From  the  people  and  Business  Partners  of  IBM. 

It’s  innovation  made  easy. 


RUN  YOUR  CRITICAL  APPLICATIONS  WITH  CONFIDENCE. 


PN:  7978EJU _ 

Featuring  up  to  two  Quad-Core  Intel®  Xeorf  Processors  E5430  2.66GHz 
Hot-swap  redundant  cooling  for  high  availability 

Includes  IBM  Director  and  PowerExecutive  to  help  manage  power 
consumption,  increase  uptime,  reduce  costs  and  improve  productivity 

3-year  on-site  limited  warranty2  on  parts  and  labor 


IBM  SYSTEM  STORAGE™ 
DS3400  EXPRESS  KIT 

$13,793 

OR  $352/MONTH  FOR  36  MONTHS’ 


PN:  1726-42U 


IBM  TIVOLI®  CONTINUOUS  DATA  PROTECTION  FOR  FILES 

$42  per  user 

PN:  D613ALL 


All-in-one  kit  makes  it  easier  to  migrate  from  your  DAS  network  to  SAN 

Includes  IBM  System  Storage  DS3400  D u al  Controller,  four  IBM  Emulex  42C2069 
4Gb/s  PCI  Express  HBAs,  Brocade  SAN  8  Port  Fibre  Channel  switch  (16  total 
ports),  twelve  4Gb/s  SFPs,  and  eight  5-meter  optical  LC  cables 

Emulex  EZ  Pilot™  installation/management  software  included 


Save  and  recovery  technology  enables  file  recovery  to  any  point  in  time 

Continuous  Data  Protection  (CDP)  protects  your  data  from  the  aftermath  of  a  virus 
attack  or  user  error 

Up  to  3  backup/replication  areas  help  protect  against  corruption,  file  loss  or 
system  loss 
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